CVE-2026-24686

go-tuf is a Go implementation of The Update Framework TUF. go-tuf's TAP 4 Multirepo Client uses the map file repository name string repoName as a filesystem path component when selecting the local metadata cache directory. Starting in version 2.0.0 and prior to version 2.4.1, if an application...

Sigstore framework path traversal vulnerability

The sigstore framework is an open-source Go language library developed by sigstore. Versions of the sigstore framework starting from 1.10.3 and earlier contained a path traversal vulnerability. This vulnerability stemmed from the lack of verification that the generated file paths remained within...

UBUNTU-CVE-2023-20898

Git Providers can read from the wrong environment because they get the same cache directory base name in Salt masters prior to 3005.2 or 3006.2. Anything that uses Git Providers with different environments can get garbage data or the wrong data, which can lead to wrongful data disclosure, wrongfu...

SUSE CVE-2023-20898

Git Providers can read from the wrong environment because they get the same cache directory base name in Salt masters prior to 3005.2 or 3006.2. Anything that uses Git Providers with different environments can get garbage data or the wrong data, which can lead to wrongful data disclosure, wrongfu...

Prototype Pollution

cache-base is vulnerable to prototype pollution. An attacker is able to exploit the vulnerability to inject arbitrary properties into existing construct prototypes and modify attributes such as proto, constructor and prototype...

PT-2020-16965

Name of the Vulnerable Software and Affected Versions cache-base versions 0.7.0 through 4.0.0 Description The issue is related to a prototype pollution vulnerability. This vulnerability allows an attacker to cause a denial of service and may potentially lead to remote code execution...

Jonschlinkert Cache Base Security Vulnerability

Jonschlinkert Cache Base is a code base for caching and interacting with objects based on the Javascript language by the individual developer of Jonschlinkert. A security vulnerability exists in cache-base versions 0.7.0 through 4.0.0 that can be exploited by an attacker to cause a denial of...