dasel-hardened-container

dasel v3.3.1 強化コンテナ これは、dasel v3.3.1 のビルド時に CVE-2026-33320（YAML エイリアスの無制限展開）のパッチを適用した melange パッケージおよび apko コンテナイメージです。イメージはすべてローカルで生成された APK から構築されており、事前にビルドされた上流イメージは使用していません。 前提条件...

dasel-melange-apko

dasel v3.3.1 — Melange + apko ビルド、CVE-2026-33320 パッチ適用版 このリポジトリは、dasel CLI（v3.3.1）を Melange で APK としてパッケージ化し、apko で最小限のコンテナイメージを構築し、CVE-2026-33320 の修正を v3.3.1 コードベースに適用したものです（バージョンアップではなくパッチ適用）。 結果として得られるのは、静的 dasel バイナリのみを含む約 4 MB のイメージで、シェルもパッケージマネージャも libc も含まず、非 root ユーザーで実行されます。 リポジトリ構成...

Linux Distros Unpatched Vulnerability : CVE-2026-33320

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dasel is a command-line tool and library for querying, modifying, and transforming data structures. Starting in version 3.0.0 and prior to version 3.3.1, Dasel'...

CVE-2026-33320

Dasel is a command-line tool and library for querying, modifying, and transforming data structures. Starting in version 3.0.0 and prior to version 3.3.1, Dasel's YAML reader allows an attacker who can supply YAML for processing to trigger extreme CPU and memory consumption. The issue is in the...

CVE-2026-33320 vulnerabilities

Vulnerabilities for packages: vale...

CVE-2026-33320

creationtimestamp| type| source ---|---|--- 2026-03-18 19:16:52+00:00| published-proof-of-concept| https://github.com/TomWright/dasel/security/advisories/GHSA-4fcp-jxh7-23x8 2026-05-04 21:00:04+00:00| seen| Telegram/rPnY3cDOMvKcPFRcx6QsxUGiZwWHKwUb91xptawBtUQTSW0 2026-06-01 21:00:04+00:00| seen|...

CVE-2022-33320

Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions...

CVE-2023-33320

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Mohammad I. Okfie WP-Hijri plugin = 1.5.1 versions...

CVE-2023-33320

creationtimestamp| type| source ---|---|--- 2023-08-30 16:12:34+00:00| seen| https://t.me/cibsecurity/69431...

CVE-2023-33320

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Mohammad I. Okfie WP-Hijri plugin = 1.5.1 versions...

CVE-2023-33320 WordPress WP-Hijri Plugin <= 1.5.1 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Mohammad I. Okfie WP-Hijri plugin = 1.5.1 versions...

CVE-2023-33320

CVE-2023-33320 is an unauthenticated Reflected Cross-Site Scripting (XSS) in the WordPress plugin WP-Hijri, affecting versions ≤ 1.5.1. Public sources (NVD/Red Hat/Patchstack/Wordfence) confirm this XSS. The vulnerability is addressed by upgrading to a version newer than 1.5.1; Patchstack notes t...

WordPress WP-Hijri Plugin <= 1.5.1 is vulnerable to Cross Site Scripting (XSS)

Software WP-Hijri Type Plugin Vulnerable versions = 1.5.1 Fixed in 1.5.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-33320 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 103e8ad73e30 Credits Le Ngoc Anh Required...

CVE-2022-33320

creationtimestamp| type| source ---|---|--- 2022-07-20 20:12:21+00:00| seen| https://t.me/cibsecurity/46695...

CVE-2022-33320

Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions...

CVE-2022-33320

ICONICS GENESIS64 family and related MC Works64 products are affected by a Deserialization of Untrusted Data vulnerability (CVE-2022-33320). The issue exists when a user loads a project configuration file containing malicious XML, enabling an unauthenticated attacker to execute arbitrary code via...

CVE-2021-33320

The CVE concerns the Flags module in Liferay Portal (7.3.1 and earlier) and Liferay DXP (7.0 before fix pack 96, 7.1 before fix pack 20, 7.2 before fix pack 5) where there is no rate limit on flag submissions, allowing remote authenticated users to spam site administrators via emails. Concrete de...