CVE-2026-3816 OWASP DefectDojo SonarQubeParser/MSDefenderParser parser.py input_zip.read denial of service

A security vulnerability has been detected in OWASP DefectDojo up to 2.55.4. This vulnerability affects the function inputzip.read of the file parser.py of the component SonarQubeParser/MSDefenderParser. The manipulation leads to denial of service. The attack can be initiated remotely. The exploi...

CVE-2026-3816

The CVE-2026-3816 affects OWASP DefectDojo

PT-2026-24055

A security vulnerability has been detected in OWASP DefectDojo up to 2.55.4. This vulnerability affects the function input zip.read of the file parser.py of the component SonarQubeParser/MSDefenderParser. The manipulation leads to denial of service. The attack can be initiated remotely. The explo...

OWASP DefectDojo security vulnerabilities

OWASP DefectDojo is a powerful vulnerability management platform and DevSecOps platform developed by the OWASP Foundation in the United States. OWASP DefectDojo versions 2.55.4 and earlier contained a security vulnerability. This vulnerability stemmed from an error in the inputzip.read function...

CVE-2026-3816: Improper Resource Shutdown or Release

A security vulnerability has been detected in OWASP DefectDojo up to 2.55.4. This vulnerability affects the function inputzip.read of the file parser.py of the component SonarQubeParser/MSDefenderParser. The manipulation leads to denial of service. The attack can be initiated remotely. The exploi...

Malicious code in defectdojo (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-5390 Malicious code in defectdojo (npm)

The package communicates with a domain associated with malicious activity...

io.jenkins.plugins:artifactory-artifact-manager (>=118.v4eb_b_1533255c, <=122.v0b_d7cb_89ca_34), io.jenkins.plugins:blackduck-security-scan (>=2.0.0, <=2.6.0-1436.vd14307a_d07ec) +6 more potentially affected by CVE-2024-47805 via org.jenkins-ci.plugins:credentials (1344.v5a_3f65a_1e173)

org.jenkins-ci.plugins:credentials MAVEN version 1344.v5a3f65a1e173 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials and may be impacted: - io.jenkins.plugins:artifactory-artifact-manager =118.v4ebb1533255c, =2.0.0,...

CVE-2023-48171

An issue in OWASP DefectDojo before v.1.5.3.1 allows a remote attacker to escalate privileges via the user permissions component...

CVE-2023-48171

An issue in OWASP DefectDojo before v.1.5.3.1 allows a remote attacker to escalate privileges via the user permissions component...

CVE-2023-48171

An issue in OWASP DefectDojo before v.1.5.3.1 allows a remote attacker to escalate privileges via the user permissions component...

CVE-2023-48171

An issue in OWASP DefectDojo before v.1.5.3.1 allows a remote attacker to escalate privileges via the user permissions component...

CVE-2023-48171: Improper Privilege Management

An issue in OWASP DefectDojo before v.1.5.3.1 allows a remote attacker to escalate privileges via the user permissions component...

CVE-2023-48171

An issue in OWASP DefectDojo before v.1.5.3.1 allows a remote attacker to escalate privileges via the user permissions component...

CVE-2023-48171

An issue in OWASP DefectDojo before v.1.5.3.1 allows a remote attacker to escalate privileges via the user permissions component...

PT-2024-13552 · Owasp · Owasp Defectdojo

Name of the Vulnerable Software and Affected Versions: OWASP DefectDojo versions prior to 1.5.3.1 Description: An issue in the user permissions component allows a remote attacker to escalate privileges. Recommendations: For versions prior to 1.5.3.1, update to version 1.5.3.1 or later to resolve...

CVE-2023-48171

CVE-2023-48171 affects OWASP DefectDojo before v1.5.3.1. The issue, described consistently across NVD/OSV/CVE feeds, is a privilege-escalation in the user permissions component that could allow a remote attacker to gain HIGH impact. The only remediation documented is to upgrade to DefectDojo v1.5...

OWASP DefectDojo security vulnerabilities

OWASP DefectDojo is a powerful vulnerability management platform and DevSecOps platform from the US-based OWASP Foundation. A security vulnerability exists in OWASP DefectDojo versions prior to v.1.5.3.1, which stems from a remote attacker being able to elevate privileges via the user rights...

io.jenkins.plugins:artifactory-artifact-manager (>=101.v0f82809a_8706, <=108.veb_6efeb_c992b), io.jenkins.plugins:defectdojo (1.049.v8272429d864a) +3 more potentially affected by CVE-2024-39459 via org.jenkins-ci.plugins:plain-credentials (182.v468b_97b_9dcb_8)

org.jenkins-ci.plugins:plain-credentials MAVEN version 182.v468b97b9dcb8 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:plain-credentials and may be impacted: - io.jenkins.plugins:artifactory-artifact-manager =101.v0f82809a8706,...

Malicious code in @defectdojo/fetlife-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d7829990b125f94bdbe28de3849b4e7d744d86a16de66a4dcb9495cb48c72dbf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...