CVE-2021-23352

This affects the package madge before 4.0.1. It is possible to specify a custom Graphviz path via the graphVizPath option parameter which when the .image, .svg or .dot functions are called, is executed by the childprocess.exec function...

CVE-2021-23352

This affects the package madge before 4.0.1. It is possible to specify a custom Graphviz path via the graphVizPath option parameter which when the .image, .svg or .dot functions are called, is executed by the childprocess.exec function...

Path traversal

This affects the package madge before 4.0.1. It is possible to specify a custom Graphviz path via the graphVizPath option parameter which when the .image, .svg or .dot functions are called, is executed by the childprocess.exec function...

CVE-2021-23352

This affects the package madge before 4.0.1. It is possible to specify a custom Graphviz path via the graphVizPath option parameter which when the .image, .svg or .dot functions are called, is executed by the childprocess.exec function...

madge SQL注入漏洞

madge is an open source developer tool for generating visual graphs of module dependencies, finding circular dependencies, and providing you with other useful information. A SQL injection vulnerability exists in madge before 4.0.1, which stems from the graphVizPath option parameter specifying a...

Command Injection

Overview madge is a Madge is a developer tool for generating a visual graph of your module dependencies, finding circular dependencies, and give you other useful info. Affected versions of this package are vulnerable to Command Injection. It is possible to specify a custom Graphviz path via the...

EulerOS 2.0 SP2 : graphviz (EulerOS-SA-2021-1303)

According to the version of the graphviz packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - NULL pointer dereference vulnerability in the rebuildvlists function in lib/dotgen/conc.c in the dotgen library in Graphviz 2.40.1 allows remote...

Huawei EulerOS: Security Advisory for graphviz (EulerOS-SA-2021-1303)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES12 Security Update : graphviz (SUSE-SU-2020:3090-1)

This update for graphviz fixes the following issues : CVE-2018-10196: Fixed a null dereference in rebuildvlis bsc1093447. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and...

SUSE-SU-2020:14524-1 Security update for graphviz

This update for graphviz fixes the following issues: - CVE-2018-10196: Fixed a null dereference in rebuildvlis bsc1093447...

EulerOS 2.0 SP5 : graphviz (EulerOS-SA-2020-2284)

According to the version of the graphviz packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - NULL pointer dereference vulnerability in the rebuildvlists function in lib/dotgen/conc.c in the dotgen library in Graphviz 2.40.1 allows remote...

Huawei EulerOS: Security Advisory for graphviz (EulerOS-SA-2020-2284)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2020:3090-1 Security update for graphviz

This update for graphviz fixes the following issues: - CVE-2018-10196: Fixed a null dereference in rebuildvlis bsc1093447...

openSUSE: Security Advisory for graphviz (openSUSE-SU-2020:1303-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE: Security Advisory for graphviz (openSUSE-SU-2020:1294-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE Security Update : graphviz (openSUSE-2020-1294)

This update for graphviz fixes the following issues : - CVE-2018-10196: Fixed a null dereference in rebuildvlis bsc1093447. This update was imported from the SUSE:SLE-15:Update update project. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...

openSUSE Security Update : graphviz (openSUSE-2020-1303)

This update for graphviz fixes the following issues : - CVE-2018-10196: Fixed a null dereference in rebuildvlis bsc1093447. This update was imported from the SUSE:SLE-15:Update update project. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...

Security update for graphviz (low)

openSUSE Security Update: Security update for graphviz Announcement ID: openSUSE-SU-2020:1303-1 Rating: low References: 1093447 Cross-References: CVE-2018-10196 Affected Products: openSUSE Leap 15.2 An update that fixes one vulnerability is now available. Description: This update for graphviz fix...

OPENSUSE-SU-2020:1303-1 Security update for graphviz

This update for graphviz fixes the following issues: - CVE-2018-10196: Fixed a null dereference in rebuildvlis bsc1093447. This update was imported from the SUSE:SLE-15:Update update project...

OPENSUSE-SU-2020:1294-1 Security update for graphviz

This update for graphviz fixes the following issues: - CVE-2018-10196: Fixed a null dereference in rebuildvlis bsc1093447. This update was imported from the SUSE:SLE-15:Update update project...