Sigstore 安全漏洞

Sigstore is an open-source software signature verification library developed by sigstore. Versions of Sigstore prior to 0.2.3 contained security vulnerabilities. These vulnerabilities stemmed from the improper propagation of failure messages during the verification process, which could lead to...

GHSA-X8C6-GJ59-6RX8 py-libp2p is vulnerable to DoS attacks through use of large RSA keys

py-libp2p before 0.2.3 allows a peer to cause a denial of service resource consumption via a large RSA key...

py-libp2p 安全漏洞

py-libp2p is a Python implementation of the libp2p network stack from the libp2p open source. A security vulnerability exists in py-libp2p versions prior to 0.2.3, which stems from the use of a large RSA key by a peer that could lead to a denial of service...

ESLint Rewrite 安全漏洞

ESLint Rewrite is an ESLint open source application. A security vulnerability exists in ESLint Rewrite versions prior to 0.2.3, which stems from improper input cleanup and is susceptible to regular expression denial of service attacks...