Medium: babel

Issue Overview: Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files containing serialized Python objects via directory traversal, leading to code execution. CVE-2021-42771 Affected Packages: babel Note: This advisory is applicable to Amazon Linux 2 AL2 Core...

Amazon Linux 2023 : emacs, emacs-common, emacs-devel (ALAS2023-2023-147)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-147 advisory. org-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for GNU Emacs allows attackers to execute arbitrary commands via a file name or directory name that contains shell metacharacters...

Design/Logic Flaw

org-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for GNU Emacs allows attackers to execute arbitrary commands via a file name or directory name that contains shell metacharacters...

CVE-2023-28617

CVE-2023-28617 affects Org-Mode's ob-latex.el in GNU Emacs (pre-9.6.1) where org-babel-execute:latex can be triggered to run attacker-controlled commands if a file or directory name contains shell metacharacters. The issue is a code-injection path via shell metacharacters in filenames, leading to...

CVE-2023-28617: Improper Neutralization of Special Elements used in an OS Command

org-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for GNU Emacs allows attackers to execute arbitrary commands via a file name or directory name that contains shell metacharacters...

PT-2023-21850

Name of the Vulnerable Software and Affected Versions Org Mode versions through 9.6.1 Description The issue allows attackers to execute arbitrary commands via a file name or directory name that contains shell metacharacters. This is possible due to a flaw in the org-babel-execute:latex function i...

SUSE CVE-2018-14470

The Babel parser in tcpdump before 4.9.3 has a buffer over-read in print-babel.c:babelprintv2...

SUSE CVE-2022-26127

A buffer overflow vulnerability exists in FRRouting through 8.1.0 due to missing a check on the input packet length in the babelpacketexamin function in babeld/message.c...

Malicious code in babel-preset-geocaching (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 51930a28ac75efda74b85ba2de6a8a191279ea0f3a36f1afa9df7928a9d9aeed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1412 Malicious code in babel-preset-geocaching (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 51930a28ac75efda74b85ba2de6a8a191279ea0f3a36f1afa9df7928a9d9aeed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

RHEL 8 : python38:3.8 and python38-devel:3.8 (RHSA-2022:7581)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:7581 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic dat...

SUSE: Security Advisory (SUSE-SU-2022:3590-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES15 Security Update : python-Babel (SUSE-SU-2022:3590-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:3590-1 advisory. - CVE-2021-42771: Fixed relative path traversal bsc1185768. Tenable has extracted the preceding description block directly from the SUSE...

SUSE-SU-2022:3590-1 Security update for python-Babel

This update for python-Babel fixes the following issues: - CVE-2021-42771: Fixed relative path traversal bsc1185768...

PYSEC-2022-260

Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin...

MAL-2022-2809 Malicious code in eslint-plguin-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 36e78eaa156f38aa85f12f0f238cd06c69b1630c00dbdd3b9a44b1c936b848b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in babel-plugin-transform3react-remove-prop-t8pes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 00b3d70f4d8d97db890539838285400fdd678a273c24916e49a3ec846ae4f7af Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in babel-pugif-sntax-jsx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8334b8dba28e26fe0cff3cd0c257928e82354f069e0e629614f643bbc4878373 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in babel-trasveres (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a9e067936e02802cca17fd41754786323146c95b43ae6c87db3e155101b8c3e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in babel-pzugin-transform-es2015-modues-commonjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f487dcb86915ec1bb46550b2f2a4b5cc2d0deb6cdabc7fb8b3ca164467e27876 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...