Fedora: Security Advisory for golang-github-deepmap-oapi-codegen (FEDORA-2022-3969b64d4b)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for golang-github-googleapis-gnostic (FEDORA-2022-3969b64d4b)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 35 Update: golang-k8s-kube-openapi-0-0.19.20210813git3c81807.fc35

Kubernetes OpenAPI spec generation & serving...

[SECURITY] Fedora 35 Update: golang-github-googleapis-gnostic-0.5.3-6.fc35

This package contains a Go command line tool which converts JSON and YAML OpenAPI descriptions to and from equivalent Protocol Buffer representations. Protocol Buffers provide a language-neutral, platform-neutral, extensible mechanism for serializing structured data. gnostic's Protocol Buffer...

[SECURITY] Fedora 35 Update: golang-github-deepmap-oapi-codegen-1.8.2-3.fc35

Generate Go client and server boilerplate from OpenAPI 3 specifications...

Fedora: Security Advisory for golang-k8s-kube-openapi (FEDORA-2022-fae3ecee19)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for golang-github-deepmap-oapi-codegen (FEDORA-2022-fae3ecee19)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 36 Update: golang-k8s-kube-openapi-0-0.21.20210813git3c81807.fc36

Kubernetes OpenAPI spec generation & serving...

[SECURITY] Fedora 36 Update: golang-github-googleapis-gnostic-0.5.3-6.fc36

This package contains a Go command line tool which converts JSON and YAML OpenAPI descriptions to and from equivalent Protocol Buffer representations. Protocol Buffers provide a language-neutral, platform-neutral, extensible mechanism for serializing structured data. gnostic's Protocol Buffer...

[SECURITY] Fedora 36 Update: golang-github-deepmap-oapi-codegen-1.8.2-3.fc36

Generate Go client and server boilerplate from OpenAPI 3 specifications...

OpenAPI Permissive Input Validation

OpenAPI specification is an API description format for REST APIs. An OpenAPI file is written in YAML or JSON and describes all the API properties like the available endpoints with the related operations or the authentication methods. The Schema object allows the definition of input and output dat...

Malicious code in lob-openapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ba21a31a25ac1c1003d37751945b8763848acd08e281bdf56ee7ee9a321021f7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4347 Malicious code in lob-openapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ba21a31a25ac1c1003d37751945b8763848acd08e281bdf56ee7ee9a321021f7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

VAmPI - Vulnerable REST API With OWASP Top 10 Vulnerabilities For Security Testing

The Vulnerable API Based on OpenAPI 3 VAmPI is a vulnerable API made with Flask and it includes vulnerabilities from the OWASP top 10 vulnerabilities for APIs. It was created as I wanted a vulnerable API to evaluate the efficiency of tools used to detect security issues in APIs. It includes a...

0xsodium (>=0.2.0 <=0.14.0), 1password-config (=0.0.1) +11304 more potentially affected by CVE-2022-32210 via undici (>=4.9.3 <=5.4.0)

undici NPM version =4.9.3, =0.2.0, =1.0.0, =0.2.0, =0.1.0, =0.0.1, =1.0.21, =1.0.1, =2.1.0, =2.1.0, =2.1.0, =2.1.1 and more Source cves: CVE-2022-32210 Source advisory: OSV:GHSA-PGW7-WX7W-2W33...

This Week in Spring - June 7th, 2022

Hi, Spring fans! Welcome to another installment of This Week in Spring! Ive just landed in tantalizing Toronto, Canada, for the SpringOne Tour Toronto show. Im so excited to be here, at long last, after so long away from one of my favorite countries. Ill be doing two talks - my usual, Kubernetes...

GHSA-27J5-2H6R-C9Q2 OpenAPI Tools OpenAPI Generator uses HTTP in various files

OpenAPI Tools OpenAPI Generator before 4.0.0-20190419.052012-560 uses http:// URLs in various build.gradle, build.gradle.mustache, and build.sbt files, which may have caused insecurely resolved dependencies...

com.ethlo.lamebda:lamebda-core (>=0.4.0 <=0.5.3), com.ethlo.lamebda:lamebda-server (>=0.5.1 <=0.5.3) +33 more potentially affected by CVE-2019-11405 via org.openapitools:openapi-generator (>=3.0.0 <=4.0.0-beta3)

org.openapitools:openapi-generator MAVEN version =3.0.0, =0.4.0, =0.5.1, =0.4.0, =0.4.0, =0.4.0, =1.1.0, =1.2.0, =0.0.6, =1.1.0, =0.0.5, =1.4.0, =1.1.0, =1.1.0, =1.1.0, =1.3.0 and more Source cves: CVE-2019-11405 Source advisory: OSV:GHSA-27J5-2H6R-C9Q2...

OpenAPI Tools OpenAPI Generator uses HTTP in various files

OpenAPI Tools OpenAPI Generator before 4.0.0-20190419.052012-560 uses http:// URLs in various build.gradle, build.gradle.mustache, and build.sbt files, which may have caused insecurely resolved dependencies...

Fedora: Security Advisory for golang-k8s-kube-openapi (FEDORA-2022-08ae2dd481)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...