CGA-G7Q3-CXP6-3C25

Bulletin has no description...

CGA-FQ7C-5683-JMFW

Bulletin has no description...

CGA-V3QQ-VH73-836H

Bulletin has no description...

CGA-FWQV-XWR9-2GVF

Bulletin has no description...

CGA-WHWP-WMHX-3GR9

Bulletin has no description...

MAL-2024-11965 Malicious code in dependency-review-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fb9bad81419f4cfa2078b1228e521070aa1d15f91e26a58d7ee754871cd614c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dependency-review-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fb9bad81419f4cfa2078b1228e521070aa1d15f91e26a58d7ee754871cd614c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CISCO-SA-20190807-ASA

creationtimestamp| type| source ---|---|--- 2024-12-17 06:41:48+00:00| seen| https://social.circl.lu/users/vulnerabilitylookup/statuses/113666793666890201...

SUSE CVE-2024-53858

The gh cli is GitHub's official command line tool. A security vulnerability has been identified in the GitHub CLI that could leak authentication tokens when cloning repositories containing git submodules hosted outside of GitHub.com and ghe.com. This vulnerability stems from several gh commands...

CVE-2024-49128

creationtimestamp| type| source ---|---|--- 2024-12-10 17:33:56+00:00| seen| https://www.thezdi.com/blog/2024/12/10/the-december-2024-security-update-review 2024-12-10 21:52:42+00:00| seen| https://infosec.exchange/users/cve/statuses/113630744521303025 2024-12-13 11:17:44+00:00| seen|...

CVE-2024-49089

creationtimestamp| type| source ---|---|--- 2024-12-10 17:33:56+00:00| seen| https://www.thezdi.com/blog/2024/12/10/the-december-2024-security-update-review 2024-12-10 19:37:31+00:00| seen| https://infosec.exchange/users/cve/statuses/113630212990764479...

CVE-2024-49101

creationtimestamp| type| source ---|---|--- 2024-12-10 17:33:56+00:00| seen| https://www.thezdi.com/blog/2024/12/10/the-december-2024-security-update-review 2024-12-10 20:07:35+00:00| seen| https://infosec.exchange/users/cve/statuses/113630331175468128...

CVE-2024-49106

creationtimestamp| type| source ---|---|--- 2024-12-10 17:33:56+00:00| seen| https://www.thezdi.com/blog/2024/12/10/the-december-2024-security-update-review 2024-12-10 20:22:36+00:00| seen| https://infosec.exchange/users/cve/statuses/113630390227389899 2024-12-13 11:17:43+00:00| seen|...

CVE-2024-49062

creationtimestamp| type| source ---|---|--- 2024-12-10 17:33:56+00:00| seen| https://www.thezdi.com/blog/2024/12/10/the-december-2024-security-update-review 2024-12-10 18:07:24+00:00| seen| https://infosec.exchange/users/cve/statuses/113629858627993499 2025-01-15 01:10:30+00:00| seen|...

CVE-2024-49104

creationtimestamp| type| source ---|---|--- 2024-12-10 17:33:56+00:00| seen| https://www.thezdi.com/blog/2024/12/10/the-december-2024-security-update-review 2024-12-10 18:45:03+00:00| seen| https://infosec.exchange/users/vuldb/statuses/113630006689181275 2024-12-10 20:22:36+00:00| seen|...

CVE-2024-49126

creationtimestamp| type| source ---|---|--- 2024-12-10 17:33:56+00:00| seen| https://www.thezdi.com/blog/2024/12/10/the-december-2024-security-update-review 2024-12-10 21:37:41+00:00| seen| https://infosec.exchange/users/cve/statuses/113630685503323940 2024-12-11 12:26:56+00:00| seen|...

CVE-2024-49075

creationtimestamp| type| source ---|---|--- 2024-12-10 17:33:56+00:00| seen| https://www.thezdi.com/blog/2024/12/10/the-december-2024-security-update-review 2024-12-10 18:37:28+00:00| seen| https://infosec.exchange/users/cve/statuses/113629976792337288 2025-01-08 19:16:53+00:00| seen|...

CVE-2024-49079

creationtimestamp| type| source ---|---|--- 2024-12-10 17:33:56+00:00| seen| https://www.thezdi.com/blog/2024/12/10/the-december-2024-security-update-review 2024-12-10 18:52:29+00:00| seen| https://infosec.exchange/users/cve/statuses/113630035878942098 2025-01-08 05:38:10+00:00| seen|...

GHSA-2RXC-GJRP-VJHX Unsoundness in anstream

When given a valid UTF8 string "ö\x1b😀", the function in crates/anstream/src/adapter/strip.rs will be confused. The UTF8 bytes are \xc3\xb6 then \x1b then \xf0\x9f\x98\x80. When looping over "non-printable bytes" \x1b\xf0 will be considered as some non-printable sequence. This will produce a brok...

Unsoundness in anstream

When given a valid UTF8 string "ö\x1b😀", the function in crates/anstream/src/adapter/strip.rs will be confused. The UTF8 bytes are \xc3\xb6 then \x1b then \xf0\x9f\x98\x80. When looping over "non-printable bytes" \x1b\xf0 will be considered as some non-printable sequence. This will produce a brok...