250 matches found
Fedora: Security Advisory for golang-github-markbates-pkger (FEDORA-2022-ea8f4e232d)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 36 Update: golang-github-rakyll-statik-0.1.7-9.fc36
Statik allows you to embed a directory of static files into your Go binary to be later served from an http.FileSystem...
[SECURITY] Fedora 36 Update: golang-github-markbates-pkger-0.17.1-6.fc36
Pkger is a tool for embedding static files into Go binaries. It will, hopeful ly, be a replacement for github.com/gobuffalo/packr/v2...
[SECURITY] Fedora 35 Update: golang-github-markbates-pkger-0.17.1-5.fc35
Pkger is a tool for embedding static files into Go binaries. It will, hopeful ly, be a replacement for github.com/gobuffalo/packr/v2...
Fedora: Security Advisory for golang-github-markbates-pkger (FEDORA-2022-fae3ecee19)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 36 Update: golang-github-rakyll-statik-0.1.7-8.fc36
Statik allows you to embed a directory of static files into your Go binary to be later served from an http.FileSystem...
[SECURITY] Fedora 36 Update: golang-github-markbates-pkger-0.17.1-5.fc36
Pkger is a tool for embedding static files into Go binaries. It will, hopeful ly, be a replacement for github.com/gobuffalo/packr/v2...
sinatra: path traversal possible outside of public_dir when serving static files
A flaw was found in Sinatra when serving static files from the public directory. The requested path is not validated if it is in the public directory, allowing files outside of the public directory to be served...
sinatra: path traversal possible outside of public_dir when serving static files
A flaw was found in Sinatra when serving static files from the public directory. The requested path is not validated if it is in the public directory, allowing files outside of the public directory to be served...
ALSA-2022:4587 Important: pcs security update
The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities. Security Fixes: sinatra: path traversal possible outside of publicdir when serving static files CVE-2022-29970 For more details about the security issues, including the impact, a CVSS score,...
sinatra: path traversal possible outside of public_dir when serving static files
A flaw was found in Sinatra when serving static files from the public directory. The requested path is not validated if it is in the public directory, allowing files outside of the public directory to be served...
sinatra: path traversal possible outside of public_dir when serving static files
A flaw was found in Sinatra when serving static files from the public directory. The requested path is not validated if it is in the public directory, allowing files outside of the public directory to be served...
sinatra: path traversal possible outside of public_dir when serving static files
A flaw was found in Sinatra when serving static files from the public directory. The requested path is not validated if it is in the public directory, allowing files outside of the public directory to be served...
GHSA-QP49-3PVW-X4M5 sinatra does not validate expanded path matches
Sinatra before 2.2.0 does not validate that the expanded path matches publicdir when serving static files...
sinatra does not validate expanded path matches
Sinatra before 2.2.0 does not validate that the expanded path matches publicdir when serving static files...
sinatra does not validate expanded path matches
Sinatra before 2.2.0 does not validate that the expanded path matches publicdir when serving static files...
CVE-2022-29970
A flaw was found in Sinatra when serving static files from the public directory. The requested path is not validated if it is in the public directory, allowing files outside of the public directory to be served. Mitigation Disable the static option which will disable the publicdir option. With th...
DEBIAN-CVE-2022-29970
Sinatra before 2.2.0 does not validate that the expanded path matches publicdir when serving static files...