1274 matches found
Sentry's Python SDK unintentionally exposes environment variables to subprocesses
Impact The bug in Sentry's Python SDK subprocess.checkoutput"env", env="TEST":"1" b'TEST=1\n' If you'd want to not pass any variables, you can set an empty dict: subprocess.checkoutput"env", env= b'' However, the bug in Sentry SDK 2.8.0 causes all environment variables to be passed to the...
Security Advisory CVE-2024-37403 (Dirty Stream) for Ivanti Docs@Work for Android
Created Date Jul 16, 2024 4:15:18 PM...
Description of the security update for SharePoint Server Subscription Edition: July 9, 2024 (KB5002606)
None None...
Fedora 40 : python3-docs / python3.12 (2024-486cb71423)
The remote Fedora 40 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2024-486cb71423 advisory. Update to 3.12.4, fix CVE-2024-4032 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has no...
MAL-2024-7089 Malicious code in cra-docs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e49ccaa79a7296b7f1237beb3210cabf6610aab5c68e2c349b1fff4d3b2bb332 The OpenSSF Package Analysis project identified 'cra-docs' @ 7.999.45 npm as malicious. It is considered malicious because: - The package...
Malicious code in cra-docs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e49ccaa79a7296b7f1237beb3210cabf6610aab5c68e2c349b1fff4d3b2bb332 The OpenSSF Package Analysis project identified 'cra-docs' @ 7.999.45 npm as malicious. It is considered malicious because: - The package...
Malicious code in skinport-rest-docs (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-3020 Malicious code in skinport-rest-docs (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in postman-labs-docs (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in hugo-cloudflare-docs (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-2492 Malicious code in hugo-cloudflare-docs (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in gaia-docs (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-2408 Malicious code in gaia-docs (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in faceplate-docs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5198954164869432a0fda9f3f723c1db53531ab2f73db84523e6f62946cf420 [email protected] runs index.js from a postinstall hook that collects the installer's OS username, current working directory, hostname, and loca...
MAL-2024-2355 Malicious code in faceplate-docs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5198954164869432a0fda9f3f723c1db53531ab2f73db84523e6f62946cf420 [email protected] runs index.js from a postinstall hook that collects the installer's OS username, current working directory, hostname, and loca...
Important: Red Hat Enhancement Advisory: Red Hat Developer Hub 1.2 release
Red Hat Developer Hub 1.2 has been released. Red Hat Developer Hub RHDH is Red Hat's enterprise-grade, self-managed, customizable developer portal based on Backstage.io. RHDH is supported on OpenShift and other major Kubernetes clusters AKS, EKS, GKE. The core features of RHDH include a single pa...
CVE-2024-1565: Improper Neutralization of Input During Web Page Generation
The EmbedPress – Embed PDF, YouTube, Google Docs, Vimeo, Wistia Videos, Audios, Maps & Any Documents in Gutenberg & Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the PDF Widget URL in all versions up to, and including, 3.9.10 due to insufficient input sanitizatio...
CVE-2024-35695
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Fahad Mahmood WP Docs allows Stored XSS.This issue affects WP Docs: from n/a through 2.1.3...
