com.boschsemanticstack:semanticstack-rql-2-querydsl (1.2.0), com.boschsemanticstack:semanticstack-rql-examples-querydsljpa (1.2.0) +3 more potentially affected by CVE-2024-49203 via io.github.openfeign.querydsl:querydsl-jpa (>=6.0.0.m1, <=6.10)

io.github.openfeign.querydsl:querydsl-jpa MAVEN version =6.0.0.m1, =6.0.0.m1, =6.0.0.m2, =6.10 - io.github.zzagtung:querydsl-jpa-postgres-json 0.2.0 Source cves: CVE-2024-49203 Source advisory: OSV:GHSA-6Q3Q-6V5J-H6VG...

com.boschsemanticstack:semanticstack-rql-2-querydsl (1.2.0), com.boschsemanticstack:semanticstack-rql-examples-querydsljpa (1.2.0) +3 more potentially affected by CVE-2024-49203 via io.github.openfeign.querydsl:querydsl-jpa (>=6.0.0.m1, <=6.10)

io.github.openfeign.querydsl:querydsl-jpa MAVEN version =6.0.0.m1, =6.0.0.m1, =6.0.0.m2, =6.10 - io.github.zzagtung:querydsl-jpa-postgres-json 0.2.0 Source cves: CVE-2024-49203 Source advisory: GHSA-6Q3Q-6V5J-H6VG...

io.github.openfeign.querydsl:querydsl-jpa-codegen (>=5.0.1, <=5.6), io.github.zzagtung:querydsl-jpa-postgres-json (0.1.1) potentially affected by CVE-2024-49203 via io.github.openfeign.querydsl:querydsl-jpa (>=5.0.1, <=5.6)

io.github.openfeign.querydsl:querydsl-jpa MAVEN version =5.0.1, =5.0.1, =5.6 - io.github.zzagtung:querydsl-jpa-postgres-json 0.1.1 Source cves: CVE-2024-49203 Source advisory: OSV:GHSA-6Q3Q-6V5J-H6VG...

io.github.openfeign.querydsl:querydsl-jpa-codegen (>=5.0.1, <=5.6), io.github.zzagtung:querydsl-jpa-postgres-json (0.1.1) potentially affected by CVE-2024-49203 via io.github.openfeign.querydsl:querydsl-jpa (>=5.0.1, <=5.6)

io.github.openfeign.querydsl:querydsl-jpa MAVEN version =5.0.1, =5.0.1, =5.6 - io.github.zzagtung:querydsl-jpa-postgres-json 0.1.1 Source cves: CVE-2024-49203 Source advisory: GHSA-6Q3Q-6V5J-H6VG...

[SECURITY] Fedora 40 Update: rust-tonic-build-0.12.3-1.fc40

Codegen module of tonic gRPC implementation...

[SECURITY] Fedora 39 Update: rust-tonic-build-0.12.3-1.fc39

Codegen module of tonic gRPC implementation...

Malicious code in rustc_codegen_cranelift-github-release (npm)

--- -= Per source details. Do not edit below this line.=-...

[SECURITY] Fedora 41 Update: rust-tonic-build-0.12.3-1.fc41

Codegen module of tonic gRPC implementation...

MAL-2024-1997 Malicious code in @realty-front/codegen (npm)

--- -= Per source details. Do not edit below this line.=-...

RHEL 8 : gimp:2.8 (RHSA-2024:0861)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:0861 advisory. The GIMP GNU Image Manipulation Program is an image composition and editing program. GIMP provides a large image manipulation toolbox,...

Vyper vulnerable to OOB DynArray access when array is on both LHS and RHS of an assignment

Impact during codegen, the length word of a dynarray is written before the data, which can result in OOB array access in the case where the dynarray is on both the lhs and rhs of an assignment. here is a minimal example producing the issue: vyper a:DynArrayuint256,3 @external def test -...

CVE-2023-31146

Vyper is a Pythonic smart contract language for the Ethereum virtual machine. Prior to version 0.3.8, during codegen, the length word of a dynarray is written before the data, which can result in out-of-bounds array access in the case where the dynarray is on both the lhs and rhs of an assignment...

Out-of-bounds

Vyper is a Pythonic smart contract language for the Ethereum virtual machine. Prior to version 0.3.8, during codegen, the length word of a dynarray is written before the data, which can result in out-of-bounds array access in the case where the dynarray is on both the lhs and rhs of an assignment...

CVE-2023-31146

Vyper is a Pythonic smart contract language for the Ethereum virtual machine. Prior to version 0.3.8, during codegen, the length word of a dynarray is written before the data, which can result in out-of-bounds array access in the case where the dynarray is on both the lhs and rhs of an assignment...

CVE-2023-31146 Vyper vulnerable to OOB DynArray access when array is on both LHS and RHS of an assignment

Vyper is a Pythonic smart contract language for the Ethereum virtual machine. Prior to version 0.3.8, during codegen, the length word of a dynarray is written before the data, which can result in out-of-bounds array access in the case where the dynarray is on both the lhs and rhs of an assignment...

CVE-2023-31146 Vyper vulnerable to OOB DynArray access when array is on both LHS and RHS of an assignment

Vyper is a Pythonic smart contract language for the Ethereum virtual machine. Prior to version 0.3.8, during codegen, the length word of a dynarray is written before the data, which can result in out-of-bounds array access in the case where the dynarray is on both the lhs and rhs of an assignment...

PT-2023-23179 · Vyper · Vyper

Name of the Vulnerable Software and Affected Versions: Vyper versions prior to 0.3.8 Description: The issue occurs during codegen when the length word of a dynarray is written before the data. This can result in out-of-bounds array access when the dynarray is on both the lhs and rhs of an...

CVE-2023-31146: Out-of-bounds Write

Vyper is a Pythonic smart contract language for the Ethereum virtual machine. Prior to version 0.3.8, during codegen, the length word of a dynarray is written before the data, which can result in out-of-bounds array access in the case where the dynarray is on both the lhs and rhs of an assignment...

barfs (0.1.2), cranefack (0.4.1) +33 more potentially affected by CVE-2023-26489 via cranelift-codegen (>=0.84.0, <=0.90.1)

cranelift-codegen CARGO version =0.84.0, =0.84.0, =0.84.0, =0.84.0, =0.84.0, =0.84.0, =0.84.0, =0.84.0, =0.84.0, =0.84.0, =0.84.0, =0.84.0, =9.0.0, =9.0.0, =23.0.0 and more Source cves: CVE-2023-26489 Source advisory: GHSA-FF4P-7XRQ-Q5R8...

barfs (0.1.2), cranefack (0.4.1) +33 more potentially affected by CVE-2023-26489 via cranelift-codegen (>=0.84.0, <=0.90.1)

cranelift-codegen CARGO version =0.84.0, =0.84.0, =0.84.0, =0.84.0, =0.84.0, =0.84.0, =0.84.0, =0.84.0, =0.84.0, =0.84.0, =0.84.0, =0.84.0, =9.0.0, =9.0.0, =23.0.0 and more Source cves: CVE-2023-26489 Source advisory: OSV:GHSA-FF4P-7XRQ-Q5R8...