137037 matches found
ROOT-OS-DEBIAN-12-CVE-2021-4217 CVE-2021-4217 in unzip - Patched by Root
Root has patched CVE-2021-4217 in the unzip package for Root:Debian:12. Multiple fixed versions available...
invokeai
invokeai 这是一个用于 Endor Labs EXPOSURE 的 合成演示目标 。 当前状态是 故意存在漏洞的 （HOT）。EXPOSURE 将报告一个 HOT 结论。 跟踪的 CVE：CVE-2024-10821（没有上游修复；仅通过补偿控制缓解）。 EXPOSURE 打开的一个演示 PR 会将规范配置文件替换为强化变体，从而打破漏洞利用链—— 无需 升级易受攻击的依赖项。 客户应用修复的工作量是 一次点击 （审核 + 合并）。 此仓库不是生产应用程序。它仅用于锚定 EXPOSURE “点击 → 打开真实 PR” 演示针对一个真实 GitHub 仓库。...
ollama
ollama 此仓库是 Endor Labs EXPOSURE 的合成演示目标 。 当前状态刻意设计为易受攻击 （热状态）。EXPOSURE 将针对其报告热（HOT）判定。 跟踪的 CVE: CVE-2024-12886（无上游修复；仅通过补偿控制缓解）。 EXPOSURE 打开的演示 PR 将规范配置文件替换为加固变体，从而破坏攻击链—— 无需 升级易受攻击的依赖。 客户应用修复的工作量为一键完成 （审查 + 合并）。 此仓库非生产应用程序。它仅用于锚定 EXPOSURE“点击 → 实际 PR 打开”演示，针对真实 GitHub 仓库。...
ROOT-APP-MAVEN-CVE-2022-42004 CVE-2022-42004 in com.fasterxml.jackson.core:jackson-databind - Patched by Root
Root has patched CVE-2022-42004 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.16.72 bug fix and security update
Red Hat OpenShift Container Platform release 4.16.72 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.16. Red Hat Product Security has rated this update as having a...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.14.75 bug fix and security update
Red Hat OpenShift Container Platform release 4.14.75 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.14. Red Hat Product Security has rated this update as having a...
http-server-node
http-server-node このリポジトリは、Endor Labs EXPOSURE 向けの 合成デモターゲット です。 現在の状態は 意図的に脆弱 HOT です。EXPOSURE はこれに対して HOT 判定を報告します。 追跡中の CVE: CVE-2021-23797 上流での修正はなく、補完的コントロールでのみ緩和。 EXPOSURE によって開かれたデモ PR は、標準の設定ファイルを強化されたバリアントに置き換え、エクスプロイトチェーンを破壊します — 脆弱な依存関係をアップグレードすること なく 。 修正を適用するための顧客の労力は ワンクリック レビュー + マージ...
ROOT-APP-NPM-CVE-2026-44005 CVE-2026-44005 in vm2 - Patched by Root
Root has patched CVE-2026-44005 in the vm2 package for Root:npm. Multiple fixed versions available...
node-prompt-here
node-prompt-here このリポジトリは、Endor Labs EXPOSURE 向けの 合成デモターゲット です。 現在の状態は 意図的に脆弱 HOT です。EXPOSURE はそれに対して HOT 判定を報告します。 追跡対象 CVE: CVE-2020-7602 上流の修正はなく、補完的なコントロールによってのみ緩和されています。 EXPOSURE によって開かれたデモ PR は、標準の設定ファイルを、脆弱な依存関係をアップグレードすることなく エクスプロイトチェーンを断つ強化版と交換します。 修正を適用するための顧客の労力は ワンクリック レビュー + マージ です。...
Apache Tapestry - Remote Code Execution
Apache Tapestry contains a critical unauthenticated remote code execution vulnerability. Affected versions include 5.4.5, 5.5.0, 5.6.2 and 5.7.0. Note that this vulnerability is a bypass of the fix for CVE-2019-0195. Before that fix it was possible to download arbitrary class files from the...
Vite - Arbitrary File Read
Vite, a provider of frontend development tooling, has a vulnerability in versions prior to 6.2.3, 6.1.2, 6.0.12, 5.4.15, and 4.5.10. @fs denies access to files outside of Vite serving allow list. Adding ?raw?? or ?import&raw?? to the URL bypasses this limitation and returns the file content if it...
CLEANSTART-2026-AU08981 Security fix for ghsa-72hv-8253-57qq applied in: apache-hive 3.1.3-r0
Security vulnerability affects the apache-hive package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-YT99310 Security fix for ghsa-8m3c-c648-2xjj applied in: langfuse 3.225.9-r0
Security vulnerability affects the langfuse package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-DX95519 Security fix for ghsa-2x7j-588g-ccc2 applied in: langfuse 3.225.9-r0
Security vulnerability affects the langfuse package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-EU68751 Security fix for ghsa-f4xh-w4cj-qxq8 applied in: langfuse 3.225.9-r0
Security vulnerability affects the langfuse package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-HM32228 Security fix for ghsa-6vj9-mwq6-2f5v applied in: langfuse 3.225.9-r1
Security vulnerability affects the langfuse package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-CM96340 Security fix for ghsa-vcvr-r3jv-pc5j applied in: langfuse 3.225.9-r4
Security vulnerability affects the langfuse package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-PO83122 Security fix for ghsa-2xp9-vwfh-vxw4 applied in: langfuse-worker 3.225.9-r3
Security vulnerability affects the langfuse-worker package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-VQ06008 Security fix for ghsa-mhm7-754m-9p8w applied in: gradle 8.14.5-r2, wso2am 4.7.0-r2, wso2mi 4.6.0-r4
ghsa-mhm7-754m-9p8w affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-SN99625 Security fix for ghsa-2m67-wjpj-xhg9 applied in: trino 481-r0
Security vulnerability affects the trino package. This issue is resolved in later releases. See references for vulnerability details...