Symlink Attack

Overview Affected versions of this package are vulnerable to Symlink Attack in the handling of Unix named-mutex and shared-memory paths via insecure global directories, symlink races, and unsafe permission changes. An attacker can truncate or overwrite files, widen directory permissions, or eleva...

Symlink Attack

Overview Affected versions of this package are vulnerable to Symlink Attack via the handling of Unix named-mutex and shared-memory paths in global directories. An attacker can gain elevated privileges, truncate or overwrite files, or widen directory permissions by exploiting symlink races or...

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write in the DateTime Hebrew-number parsing process. An attacker can cause the application to terminate unexpectedly by providing specially crafted input that leads to reading outside the expected stack bounds. Remediation...