@angular-devkit/build-angular (>=18.0.0-next.0, <=18.1.0-next.2), @angular/build (>=18.0.0-next.3, <=18.1.0-next.2) +100 more potentially affected by CVE-2024-45812 via vite (>=5.2.0, <=5.2.13)

vite NPM version =5.2.0, =18.0.0-next.0, =18.0.0-next.3, =0.36.1-fix1, =0.21.1, =1.0.375, =1.1.0, =5.0.0-alpha.4, =0.1.0-rc.8, =0.0.3, =0.0.22, =18.0.0-next.1, =18.0.0-next.1, =3.0.2, =3.2.12 and more Source cves: CVE-2024-45812 Source advisory: MEND:CVE-2024-45812...

CVE-2024-45811 server.fs.deny bypassed when using ?import&raw in vite

Vite a frontend build tooling framework for javascript. In affected versions the contents of arbitrary files can be returned to the browser. @fs denies access to files outside of Vite serving allow list. Adding ?import&raw to the URL bypasses this limitation and returns the file content if it...

@angular-devkit/build-angular (>=18.0.0-next.0, <=18.1.0-next.2), @angular/build (>=18.0.0-next.3, <=18.1.0-next.2) +100 more potentially affected by CVE-2024-45812 via vite (>=5.2.0, <=5.2.13)

vite NPM version =5.2.0, =18.0.0-next.0, =18.0.0-next.3, =0.36.1-fix1, =0.21.1, =1.0.375, =1.1.0, =5.0.0-alpha.4, =0.1.0-rc.8, =0.0.3, =0.0.22, =18.0.0-next.1, =18.0.0-next.1, =3.0.2, =3.2.12 and more Source cves: CVE-2024-45812 Source advisory: OSV:GHSA-64VR-G452-QVP3...

@angular-devkit/build-angular (>=18.2.0, <=19.0.0-next.6), @angular/build (>=18.2.0, <=19.0.0-next.6) +44 more potentially affected by CVE-2024-45812 via vite (>=5.4.0, <=5.4.5)

vite NPM version =5.4.0, =18.2.0, =18.2.0, =0.0.1-alpha.0, =1.0.1, =2025.1.17-950, =2025.2.11-1732, =18.2.0-snapshot-1724807614589, =18.2.0-snapshot-1724807614589, =2.2.1, =2.3.0, =0.0.1724939132543, =8.6.0, =1.0.15, =2.23.16, =2.27.11 and more Source cves: CVE-2024-45812 Source advisory:...

@angular-devkit/build-angular (>=18.1.0-next.3, <=18.2.0-rc.0), @angular/build (>=18.1.0-next.3, <=18.2.0-rc.0) +46 more potentially affected by CVE-2024-45812 via vite (>=5.3.0, <=5.3.5)

vite NPM version =5.3.0, =18.1.0-next.3, =18.1.0-next.3, =2.0.0-beta.3, =0.44.0, =5.0.0-alpha.11, =18.1.0-snapshot-1721253261323, =18.1.0-snapshot-1721253261323, =1.0.1, =11.17.8, =0.0.1, =14.190.0-FUI-2012.1, =14.190.0-FUI-2012.1, =0.0.1719809477737, =8.1.1, =8.5.5 - @hybrbase-front/cli 1.0.0 an...

@angular-devkit/build-angular (>=18.0.0-next.0, <=18.1.0-next.2), @angular/build (>=18.0.0-next.3, <=18.1.0-next.2) +100 more potentially affected by CVE-2024-45812 via vite (>=5.2.0, <=5.2.13)

vite NPM version =5.2.0, =18.0.0-next.0, =18.0.0-next.3, =0.36.1-fix1, =0.21.1, =1.0.375, =1.1.0, =5.0.0-alpha.4, =0.1.0-rc.8, =0.0.3, =0.0.22, =18.0.0-next.1, =18.0.0-next.1, =3.0.2, =3.2.12 and more Source cves: CVE-2024-45812 Source advisory: GHSA-64VR-G452-QVP3...

@angular-devkit/build-angular (>=18.1.0-next.3, <=18.2.0-rc.0), @angular/build (>=18.1.0-next.3, <=18.2.0-rc.0) +46 more potentially affected by CVE-2024-45812 via vite (>=5.3.0, <=5.3.5)

vite NPM version =5.3.0, =18.1.0-next.3, =18.1.0-next.3, =2.0.0-beta.3, =0.44.0, =5.0.0-alpha.11, =18.1.0-snapshot-1721253261323, =18.1.0-snapshot-1721253261323, =1.0.1, =11.17.8, =0.0.1, =14.190.0-FUI-2012.1, =14.190.0-FUI-2012.1, =0.0.1719809477737, =8.1.1, =8.5.5 - @hybrbase-front/cli 1.0.0 an...

@adhd/backlog (>=1.0.0, <=1.0.19), @adhd/dispatch-cli (>=0.1.6, <=0.1.11) +254 more potentially affected by CVE-2024-45811 via vite (>=5.0.0, <=5.1.7)

vite NPM version =5.0.0, =1.0.0, =0.1.6, =2.2.1, =0.0.1, =0.7.9, =17.1.0-next.0, =1.0.25-beta.0, =0.5.0, =2.0.0-beta.0, =0.22.0, =1.0.1, =1.0.0-rc.12, =1.0.0, =1.0.64 and more Source cves: CVE-2024-45811 Source advisory: OSV:GHSA-9CWX-2883-4WFX...

@angular-devkit/build-angular (>=18.1.0-next.3, <=18.2.0-rc.0), @angular/build (>=18.1.0-next.3, <=18.2.0-rc.0) +46 more potentially affected by CVE-2024-45811 via vite (>=5.3.0, <=5.3.5)

vite NPM version =5.3.0, =18.1.0-next.3, =18.1.0-next.3, =2.0.0-beta.3, =0.44.0, =5.0.0-alpha.11, =18.1.0-snapshot-1721253261323, =18.1.0-snapshot-1721253261323, =1.0.1, =11.17.8, =0.0.1, =14.190.0-FUI-2012.1, =14.190.0-FUI-2012.1, =0.0.1719809477737, =8.1.1, =8.5.5 - @hybrbase-front/cli 1.0.0 an...

@angular-devkit/build-angular (>=18.2.0, <=19.0.0-next.6), @angular/build (>=18.2.0, <=19.0.0-next.6) +44 more potentially affected by CVE-2024-45811 via vite (>=5.4.0, <=5.4.5)

vite NPM version =5.4.0, =18.2.0, =18.2.0, =0.0.1-alpha.0, =1.0.1, =2025.1.17-950, =2025.2.11-1732, =18.2.0-snapshot-1724807614589, =18.2.0-snapshot-1724807614589, =2.2.1, =2.3.0, =0.0.1724939132543, =8.6.0, =1.0.15, =2.23.16, =2.27.11 and more Source cves: CVE-2024-45811 Source advisory:...

@angular-devkit/build-angular (>=18.2.0, <=19.0.0-next.6), @angular/build (>=18.2.0, <=19.0.0-next.6) +44 more potentially affected by CVE-2024-45811 via vite (>=5.4.0, <=5.4.5)

vite NPM version =5.4.0, =18.2.0, =18.2.0, =0.0.1-alpha.0, =1.0.1, =2025.1.17-950, =2025.2.11-1732, =18.2.0-snapshot-1724807614589, =18.2.0-snapshot-1724807614589, =2.2.1, =2.3.0, =0.0.1724939132543, =8.6.0, =1.0.15, =2.23.16, =2.27.11 and more Source cves: CVE-2024-45811 Source advisory:...

@angular-devkit/build-angular (>=18.1.0-next.3, <=18.2.0-rc.0), @angular/build (>=18.1.0-next.3, <=18.2.0-rc.0) +46 more potentially affected by CVE-2024-45811 via vite (>=5.3.0, <=5.3.5)

vite NPM version =5.3.0, =18.1.0-next.3, =18.1.0-next.3, =2.0.0-beta.3, =0.44.0, =5.0.0-alpha.11, =18.1.0-snapshot-1721253261323, =18.1.0-snapshot-1721253261323, =1.0.1, =11.17.8, =0.0.1, =14.190.0-FUI-2012.1, =14.190.0-FUI-2012.1, =0.0.1719809477737, =8.1.1, =8.5.5 - @hybrbase-front/cli 1.0.0 an...

@angular-devkit/build-angular (>=18.0.0-next.0, <=18.1.0-next.2), @angular/build (>=18.0.0-next.3, <=18.1.0-next.2) +100 more potentially affected by CVE-2024-45811 via vite (>=5.2.0, <=5.2.13)

vite NPM version =5.2.0, =18.0.0-next.0, =18.0.0-next.3, =0.36.1-fix1, =0.21.1, =1.0.375, =1.1.0, =5.0.0-alpha.4, =0.1.0-rc.8, =0.0.3, =0.0.22, =18.0.0-next.1, =18.0.0-next.1, =3.0.2, =3.2.12 and more Source cves: CVE-2024-45811 Source advisory: OSV:GHSA-9CWX-2883-4WFX...

@angular-devkit/build-angular (>=18.0.0-next.0, <=18.1.0-next.2), @angular/build (>=18.0.0-next.3, <=18.1.0-next.2) +100 more potentially affected by CVE-2024-45811 via vite (>=5.2.0, <=5.2.13)

vite NPM version =5.2.0, =18.0.0-next.0, =18.0.0-next.3, =0.36.1-fix1, =0.21.1, =1.0.375, =1.1.0, =5.0.0-alpha.4, =0.1.0-rc.8, =0.0.3, =0.0.22, =18.0.0-next.1, =18.0.0-next.1, =3.0.2, =3.2.12 and more Source cves: CVE-2024-45811 Source advisory: GHSA-9CWX-2883-4WFX...

CVE-2024-45496

A flaw was found in OpenShift. This issue occurs due to the misuse of elevated privileges in the OpenShift Container Platform's build process. During the build initialization step, the git-clone container is run with a privileged security context, allowing unrestricted access to the node. An...

Red Hat OpenShift Container Platform security vulnerabilities

Red Hat OpenShift Container Platform is a suite of application platforms from Red Hat, Inc. that help organizations develop, deploy and manage existing container-based applications across physical, virtual and public cloud infrastructures. A security vulnerability exists in Red Hat OpenShift...

CVE-2024-45811: Exposure of Sensitive Information to an Unauthorized Actor

Vite a frontend build tooling framework for javascript. In affected versions the contents of arbitrary files can be returned to the browser. @fs denies access to files outside of Vite serving allow list. Adding ?import&raw to the URL bypasses this limitation and returns the file content if it...

Acronis’ various products have security vulnerabilities

Acronis Backup plugin for cPanel & WHM Linux, etc. is a plugin from Acronis Switzerland. A security vulnerability exists in various Acronis products, which stems from an unnecessary privilege assignment leading to the disclosure of sensitive data. The following products and versions are affected:...

CVE-2024-45496

A flaw was found in OpenShift. This issue occurs due to the misuse of elevated privileges in the OpenShift Container Platform's build process. During the build initialization step, the git-clone container is run with a privileged security context, allowing unrestricted access to the node. An...

CVE-2024-7387 Openshift/builder: path traversal allows command injection in privileged buildcontainer using docker build strategy

A flaw was found in openshift/builder. This vulnerability allows command injection via path traversal, where a malicious user can execute arbitrary commands on the OpenShift node running the builder container. When using the “Docker” strategy, executable files inside the privileged build containe...