3952 matches found
Design/Logic Flaw
Tremor is an event processing system for unstructured data. A vulnerability exists between versions 0.7.2 and 0.11.6. This vulnerability is a memory safety Issue when using patch or merge on state and assign the result back to state. In this case, affected versions of Tremor and the tremor-script...
CVE-2021-39228
Tremor is an event processing system for unstructured data. A vulnerability exists between versions 0.7.2 and 0.11.6. This vulnerability is a memory safety Issue when using patch or merge on state and assign the result back to state. In this case, affected versions of Tremor and the tremor-script...
CVE-2021-39227
ZRender is a lightweight graphic library providing 2d draw for Apache ECharts. In versions prior to 5.2.1, using merge and clone helper methods in the src/core/util.ts module results in prototype pollution. It affects the popular data visualization library Apache ECharts, which uses and exports...
CVE-2021-39227
ZRender is a lightweight graphic library providing 2d draw for Apache ECharts. In versions prior to 5.2.1, using "merge" and "clone" helper methods in the "src/core/util.ts" module results in prototype pollution. It affects the popular data visualization library Apache ECharts, which uses and...
CVE-2021-39228
Tremor is an event processing system for unstructured data. A vulnerability exists between versions 0.7.2 and 0.11.6. This vulnerability is a memory safety Issue when using "patch" or "merge" on "state" and assign the result back to "state". In this case, affected versions of Tremor and the...
CVE-2021-39228
CVE-2021-39228 affects Tremor 0.7.2–0.11.6, including the tremor-script crate. The issue is a memory-safety bug that occurs when using tremor-script’s patch or merge on the state and assigning the result back to state; the optimizer could modify the target in place, leaving references to memory t...
CVE-2021-39227: Improperly Controlled Modification of Object Prototype Attributes
ZRender is a lightweight graphic library providing 2d draw for Apache ECharts. In versions prior to 5.2.1, using merge and clone helper methods in the src/core/util.ts module results in prototype pollution. It affects the popular data visualization library Apache ECharts, which uses and exports...
PT-2021-22478
Name of the Vulnerable Software and Affected Versions Tremor versions 0.7.2 through 0.11.6 Description The issue is a memory safety problem that occurs when using patch or merge on state and assigning the result back to state. This allows access to already freed regions of memory, which can be se...
Tremor 资源管理错误漏洞
Tremor is an open source event processing system for unstructured data. A resource management error vulnerability exists in Tremor Tremor-runtime, which arises when the product causes access to freed memory when using patch or merge on a state and assigning the result back to the state state. The...
CVE-2021-39228: Use After Free
Tremor is an event processing system for unstructured data. A vulnerability exists between versions 0.7.2 and 0.11.6. This vulnerability is a memory safety Issue when using patch or merge on state and assign the result back to state. In this case, affected versions of Tremor and the tremor-script...
PT-2021-22477 · Apache · Apache Echarts
Name of the Vulnerable Software and Affected Versions: ZRender versions prior to 5.2.1 Apache ECharts versions prior to 5.2.1 Description: The issue results in prototype pollution when using merge and clone helper methods in the src/core/util.ts module. It affects Apache ECharts, which uses and...
GitLab: Stored XSS in merge request creation page through payload in approval rule name
Summary Hi GitLab team, I found a stored XSS in merge request creation page caused by a payload in the name of an "approval rule". Adding approval rules is a feature that is unlocked for premium subscriptions or above. This does not seem to block it from being used against regular users on for...
Memory Safety Issue when using `patch` or `merge` on `state` and assign the result back to `state`
Affected versions of this crate maintains references to memory that might have been freed already. If affects the following two tremor-script language constructs: A Merge where we assign the result back to the target expression and the expression to be merged needs to reference the event: let sta...
PT-2021-24276
Name of the Vulnerable Software and Affected Versions: tremor-script versions prior to 0.11.6 Description: The issue is related to a use-after-free error in the tremor-script crate for Rust. It affects the Merge and Patch language constructs when they reference the event and assign the result bac...
PT-2021-24275
Name of the Vulnerable Software and Affected Versions: tremor-script versions prior to 0.11.6 Description: The issue is related to a use-after-free error in the tremor-script crate. It affects the tremor-script language constructs, specifically Merge and Patch, where the result is assigned back t...
merge vulnerable to Prototype Pollution
merge is vulnerable to Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution'...
GHSA-CQQH-49MX-FQ63 merge vulnerable to Prototype Pollution
merge is vulnerable to Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution'...
CVE-2021-3645
merge is vulnerable to Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution'...