69 matches found
UBUNTU-CVE-2022-24921
regexp.Compile in Go before 1.16.15 and 1.17.x before 1.17.8 allows stack exhaustion via a deeply nested expression...
CVE-2022-24921
Removed by vendor...
Security fix for the ALT Linux 10 package golang version 1.16.15-alt1
1.16.15-alt1 built March 5, 2022 Alexey Shabalin in task 296256 --- March 4, 2022 Alexey Shabalin - New version 1.16.15 Fixes: CVE-2022-24921...
CVE-2022-24921
CVE-2022-24921 affects the Go languageās standard library (regexp.Compile). The issue allows stack exhaustion via a deeply nested regular expression, leading to denial of service. The root cause is a vulnerability in regexp handling that can consume stack memory under certain inputs. Rationale: i...
CVE-2022-24921
regexp.Compile in Go before 1.16.15 and 1.17.x before 1.17.8 allows stack exhaustion via a deeply nested expression...
CVE-2022-24921
regexp.Compile in Go before 1.16.15 and 1.17.x before 1.17.8 allows stack exhaustion via a deeply nested expression...
Security fix for the ALT Linux 10 package golang version 1.17.8-alt1
March 4, 2022 Alexey Shabalin 1.17.8-alt1 - New version 1.17.8 Fixes: CVE-2022-24921...
CVE-2021-24921 Advanced Database Cleaner < 3.0.4 - Reflected Cross-Site Scripting
The Advanced Database Cleaner WordPress plugin before 3.0.4 does not sanitise and escape $GET keys and values before outputting them back in attributes, leading to Reflected Cross-Site Scripting issues...
CVE-2021-24921
The CVE-2021-24921 entry relates to the WordPress plugin Advanced Database Cleaner (before version 3.0.4). The underlying issue is that the plugin does not sanitize/escape $_GET keys and values before echoing them into attributes, enabling Reflected Cross-Site Scripting (XSS). Affected software: ...