73 matches found
Updated pagure packages fix a security vulnerability
Pagure before 5.6 allows XSS via the templates/blame.html blame view...
MGASA-2021-0206 Updated pagure packages fix a security vulnerability
Pagure before 5.6 allows XSS via the templates/blame.html blame view...
py vulnerable to Regular Expression Denial of Service
A denial of service via regular expression in the py.path.svnwc component of py aka python-py through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality...
console-blame (>=1.0.0, <=1.1.1), grunt-lintblame (>=0.1.0, <=0.3.5) +2 more potentially affected by CVE-2020-28434 via gitblame (>=0.1.0, <=0.1.1)
gitblame NPM version =0.1.0, =1.0.0, =0.1.0, =0.2.5, =0.9.5 - tch-lint-jshint 0.0.1 Source cves: CVE-2020-28434 Source advisory: SNYK:JS-GITBLAME-1050430...
A denial of service via regular expression in the py.path.svnwc component of py (aka python-py) through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality.
...
CVE-2020-29651
A denial of service via regular expression in the py.path.svnwc component of py aka python-py through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality...
CVE-2020-29651
A denial of service via regular expression in the py.path.svnwc component of py aka python-py through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality...
CVE-2020-29651
A denial of service via regular expression in the py.path.svnwc component of py aka python-py through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality...
DEBIAN-CVE-2020-29651
A denial of service via regular expression in the py.path.svnwc component of py aka python-py through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality...
UBUNTU-CVE-2020-29651
A denial of service via regular expression in the py.path.svnwc component of py aka python-py through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality...
Input validation
A denial of service via regular expression in the py.path.svnwc component of py aka python-py through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality...
PYSEC-2020-92
A denial of service via regular expression in the py.path.svnwc component of py aka python-py through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality...
CVE-2020-29651
A denial of service via regular expression in the py.path.svnwc component of py aka python-py through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality...
PYSEC-2020-92
A denial of service via regular expression in the py.path.svnwc component of py aka python-py through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality...
CVE-2020-29651
A denial of service via regular expression in the py.path.svnwc component of py aka python-py through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality...
Pytest Security Breach
Pytest is a Python language-based testing framework from the Pytest team. Pytest has a security vulnerability in py.path.svnwc that stems from a denial of service via a regular expression in py.path from the python-py svnwc component can be exploited by an attacker who can use the vulnerability t...
CVE-2019-11556
Pagure before 5.6 allows XSS via the templates/blame.html blame view...
CVE-2019-11556
Pagure before 5.6 allows XSS via the templates/blame.html blame view...