Withdrawn: Use after free in SciPy

Withdrawn Advisory This advisory has been withdrawn because it has been found to not be an issue. Please see the issue here for more information. Original Description A use-after-free issue was discovered in PyFindObjects function in SciPy versions prior to 1.8.0...

Withdrawn: SQL injection in Yii 2

Withdrawn Advisory This advisory has been withdrawn because the issue originates from a product built on Yii2, not the Yii2 Framework itself. This link is maintained to preserve external references. Original Description SQL injection vulnerability found in Yii Framework Yii 2 Framework before...

SUSE CVE-2012-5620

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

GHSA-RW83-V3PW-M362 Withdrawn: safeurl-python contains Server-Side Request Forgery

Withdrawn This advisory has been withdrawn as a duplicate of GHSA-jgh8-vchw-q3g7. Original Description isInList in the safeurl-python package before 1.2 for Python has an insufficiently restrictive regular expression for external domains, leading to SSRF...

Withdrawn Advisory: HTML injections in BTCPayServer

Withdrawn Advisory This advisory has been withdrawn because all of the files affected by this vulnerability lie in the BTCPayServer folder, which is not in the NuGet ecosystem. The BTCPayServer folder, corresponding to the BTCPayServer NuGet entry, does not contain any files that were changed to...

Duplicate of GHSA-4xh4-v2pq-jvhm

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-4xh4-v2pq-jvhm. This link is maintained to preserve external references. Original Description The personnummer implementation before 3.0.3 for Dart mishandles numbers in which the last four digits match the...

UBUNTU-CVE-2022-3555

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

GHSA-W596-4WVX-J9J6 Withdrawn Advisory: ReDoS in py library when used with subversion

Withdrawn Advisory This advisory has been withdrawn because evidence does not suggest that CVE-2022-42969 is a valid, reproducible vulnerability. This link is maintained to preserve external references. Original Description The py library through 1.11.0 for Python allows remote attackers to condu...

GHSA-9PGH-QQPF-7WQJ Withdrawn: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in @xmldom/xmldom and xmldom

Withdrawn This advisory has been withdrawn because the maintainers of @xmldom/xmldom and multiple third parties disputed the validity of the issue. Attempts to create or replicate a proof of concept have been unsuccessful. Original Description Impact A prototype pollution vulnerability exists in...

GHSA-MF2H-6MG2-PX9X JXPath Out-of-bounds Write vulnerability

Withdrawn This advisory has been withdrawn because the original report was found to be invalid. This link is maintained to preserve external references. Original Description Those using JXPath to interpret XPath may be vulnerable to Denial of Service attacks DOS. If the parser is running on user...

GHSA-99JC-V8QM-WJVV JXPath Out-of-bounds Write vulnerability

Withdrawn This advisory has been withdrawn because the original report was found to be invalid. This link is maintained to preserve external references. Original Description Those using JXPath to interpret XPath may be vulnerable to Denial of Service attacks DOS. If the parser is running on user...

GHSA-RWQR-C348-M5WR Withdrawn: Denial of Service in aiohttp

Withdrawn This advisory has been withdrawn because the maintainers of aiohttp and multiple third parties disputed the validity of the issue. There is not sufficient evidence for the claims in the original report. Original Description aiohttp v3.8.1 was discovered to contain an invalid IPv6 URL...

Withdrawn Advisory: Magento 2 Community Edition XSS Vulnerability

Withdrawn Advisory This advisory has been withdrawn because the vulnerability does not affect a package in one of the GitHub Advisory Database's supported ecosystems. This link is maintained to preserve external references. Original Description In Magento prior to 1.9.4.3 and Magento prior to...

Withdrawn Advisory: Magento 2 Community Edition RCE Vulnerability

Withdrawn Advisory This advisory has been withdrawn because the vulnerability does not affect a package in one of the GitHub Advisory Database's supported ecosystems. This link is maintained to preserve external references. Original Description In Magento prior to 1.9.4.3, and Magento prior to...

GHSA-5H6X-M52P-23PH Withdrawn Advisory: Improper Certificate Validation in Apache Qpid Proton

Withdrawn Advisory This advisory has been withdrawn because the vulnerability only affects the Qpid Proton C library and not org.apache.qpid:proton-j. This link has been maintained to preserve external references. Original Description While investigating bug PROTON-2014, we discovered that under...

Withdrawn: Code execution via SVG file upload in tiddlywiki

Withdrawn Advisory This advisory has been withdrawn because it has been found to not be valid. Please see the issue here for more information. Original Description An arbitrary file upload vulnerability in the file upload module of Tiddlywiki5 v5.2.2 allows attackers to execute arbitrary code via...

Withdrawn Advisory: Pulp Improper Path Parsing

Withdrawn Advisory This advisory has been withdrawn because the package pulpcore deals with pulp 3 only. This advisory concerns pulp 2, which is not in a supported ecosystem. Original Description pulp 2.16.x and possibly older is vulnerable to an improper path parsing. A malicious user or a...

GHSA-7GC6-QH9X-W6H8 Withdrawn Advisory: Incorrect Authorization in cross-fetch

Withdrawn Advisory This advisory has been withdrawn because the vulnerability originates from a dependency. For more information, see the Maintainer comments in https://huntr.com/bounties/ab55dfdd-2a60-437a-a832-e3efe3d264ac. Original Description When fetching a remote url with Cookie if it get...

PT-2022-11859 · Laravel · Laravel

Name of the Vulnerable Software and Affected Versions: laravel version 5.8.38 Description: A Remote Code Execution issue exists via an unserialize pop chain in certain functions, including destruct in RoutingPendingResourceRegistration.php, call in QueueCapsuleManager.php, and invoke in...

Withdrawn Advisory: OS Command Injection in effect

Withdrawn Advisory This advisory has been withdrawn because the npm package effect, for which alerts were issued, does not correspond with https://github.com/Javascipt/effect, the repository with the vulnerable code. https://github.com/Javascipt/effect is not in any supported ecosystem...