Malware in req-scope

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2024-10251 Malicious code in req-scope (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 05048fd5770283947973e00b424f5a1810a67067ed3451a3bb5f9f5a5ce5d703 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10250 Malicious code in req-ban (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a9a1ab6f28d706cb286af274f9118a3e68076a1daca8d0c34a9499b9cbca5af Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in req-ban

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

CVE-2024-10131

The "addllm" function in "llmapp.py" in infiniflow/ragflow version 0.11.0 contains a remote code execution RCE vulnerability. The function uses user-supplied input "req'llmfactory'" and "req'llmname'" to dynamically instantiate classes from various model dictionaries. This approach allows an...

PT-2024-33709

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.58 Description: A null pointer dereference bug can be triggered in the Linux kernel when a guest sends an SCSI AN request. This occurs because vc.target is set to NULL for VIRTIO SCSI T AN requests, and late...

GO-2024-3098 The req library may send an unintended request when a malformed URL is provided in github.com/imroc/req

The req library is a widely used HTTP library in Go. However, it does not handle malformed URLs effectively. As a result, after parsing a malformed URL, the library may send HTTP requests to unexpected destinations, potentially leading to security vulnerabilities or unintended behavior in...

PT-2024-32796

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.58 Description A problem in the media section of the Linux kernel, specifically with the Mediatek VP8 stateless decoder, has been resolved. The issue led to a kernel crash when fb is NULL. This was due to a...

GHSA-CJ55-GC7M-WVCQ req may send an unintended request when a malformed URL is provided

The req library is a widely used HTTP library in Go. However, it does not handle malformed URLs effectively. As a result, after parsing a malformed URL, the library may send HTTP requests to unexpected destinations, potentially leading to security vulnerabilities or unintended behavior in...

req may send an unintended request when a malformed URL is provided

The req library is a widely used HTTP library in Go. However, it does not handle malformed URLs effectively. As a result, after parsing a malformed URL, the library may send HTTP requests to unexpected destinations, potentially leading to security vulnerabilities or unintended behavior in...

CVE-2024-45258

The req package before 3.43.4 for Go may send an unintended request when a malformed URL is provided, because cleanHost in http.go intentionally uses a "garbage in, garbage out" design...

req 安全漏洞

req is a simple Go HTTP client using Black Magic by roc individual developers. A security vulnerability exists in versions prior to req 3.43.4, which stems from the deliberate garbage in, garbage out design of the cleanHost function in http.go, which may result in unintended requests being sent...

CVE-2024-45258

The req package before 3.43.4 for Go may send an unintended request when a malformed URL is provided, because cleanHost in http.go intentionally uses a "garbage in, garbage out" design...

CVE-2024-45258

The req package before 3.43.4 for Go may send an unintended request when a malformed URL is provided, because cleanHost in http.go intentionally uses a "garbage in, garbage out" design...

CVE-2024-45258

The req package before 3.43.4 for Go may send an unintended request when a malformed URL is provided, because cleanHost in http.go intentionally uses a "garbage in, garbage out" design...

PT-2024-32114

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue occurs in the Linux kernel when the smb2 new read req function is called from SMB2 read while using rdma and reaching the rdma readwrite threshold. This can lead to dereferenci...

CVE-2024-45258: Improper Input Validation

The req package before 3.43.4 for Go may send an unintended request when a malformed URL is provided, because cleanHost in http.go intentionally uses a "garbage in, garbage out" design...

PT-2024-31514 · Req · Req

Name of the Vulnerable Software and Affected Versions: req package versions prior to 3.43.4 Description: The req package may send an unintended request when a malformed URL is provided, due to the cleanHost function in http.go using a "garbage in, garbage out" design. This can lead to security...

CVE-2024-45258

The req package before 3.43.4 for Go may send an unintended request when a malformed URL is provided, because cleanHost in http.go intentionally uses a "garbage in, garbage out" design...

CVE-2024-45258

The req package for Go (versions prior to 3.43.4 ) is vulnerable to Improper Input Validation due to the cleanHost function in http.go. This function intentionally uses a "garbage in, garbage out" design, which fails to effectively handle malformed URLs . Consequently, the library may send HTTP r...