PT-2024-10559 · Symfony · Symfony Webprofiler

Name of the Vulnerable Software and Affected Versions: Symfony WebProfiler bundle versions 2.0.X through 2.5.X Description: The Symfony Web Profiler, a development tool, should not be enabled on production servers due to the sensitive information it provides about a Symfony project. If enabled in...

PT-2023-28487 · Chef · Chef Inspec

Name of the Vulnerable Software and Affected Versions: Chef InSpec versions prior to 4.56.58 Chef InSpec versions prior to 5.22.29 Description: The issue allows local command execution via maliciously crafted profiles, specifically affecting the archive, check, and export commands in Chef InSpec...