5024 matches found
GHSA-M44J-CFRM-G8QC vulnerabilities
Vulnerabilities for packages: opensearch, gradle, ruby3.3-bouncy-castle-java, ruby3.2-bouncy-castle-java, gradle-stage0, keycloak, sonarqube-10, jruby...
GHSA-M44J-CFRM-G8QC vulnerabilities
Vulnerabilities for packages: ruby3.2-bouncy-castle-java, opensearch, ruby3.3-bouncy-castle-java, gradle-stage0, jruby, gradle, sonarqube-10, keycloak, elasticsearch...
GHSA-V435-XC8X-WVR9 vulnerabilities
Vulnerabilities for packages: tez, opensearch, gradle, druid, ruby3.3-bouncy-castle-java, ruby3.2-bouncy-castle-java, keycloak, sonarqube-10, jruby...
GHSA-8XFC-GM6G-VGPV vulnerabilities
Vulnerabilities for packages: druid, tez, ruby3.2-bouncy-castle-java, opensearch, ruby3.3-bouncy-castle-java, jruby, gradle, sonarqube-10, keycloak, elasticsearch, bouncycastle-fips...
GHSA-8XFC-GM6G-VGPV vulnerabilities
Vulnerabilities for packages: tez, opensearch, gradle, druid, ruby3.3-bouncy-castle-java, ruby3.2-bouncy-castle-java, keycloak, sonarqube-10, jruby...
MAL-2024-1363 Malicious code in input-fns (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d97cebe2b3c5f99612c7086d455844599d1f9afef3e76c1c74b54de73ad1ad9b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
GHSA-FR5H-RQP8-MJ6G vulnerabilities
Vulnerabilities for packages: jitsucom-jitsu...
GHSA-P343-9QWP-PQXV vulnerabilities
Vulnerabilities for packages: neo4j...
Malicious code in test-poc3 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0dd2e1b9551e2d05eb6769e870035396fbdd5bd09b3116b00901a73cb9e64859 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
GHSA-G7VV-2V7X-GJ9P vulnerabilities
Vulnerabilities for packages: checkov, kubeflow-katib, py3-tqdm...
GHSA-4H8F-2WVX-GG5W vulnerabilities
Vulnerabilities for packages: druid, ruby3.2-bouncy-castle-java, opensearch, ruby3.3-bouncy-castle-java, jruby, gradle, sonarqube-10, keycloak, elasticsearch...
GHSA-2G4Q-9VM9-9FW4 vulnerabilities
Vulnerabilities for packages: jenkins...
GHSA-2G4Q-9VM9-9FW4 vulnerabilities
Vulnerabilities for packages: jenkins...
CVE-2024-30251
aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. In affected versions an attacker can send a specially crafted POST multipart/form-data request. When the aiohttp server processes it, the server will enter an infinite loop and be unable to process any further request...
CVE-2024-30251
aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. In affected versions an attacker can send a specially crafted POST multipart/form-data request. When the aiohttp server processes it, the server will enter an infinite loop and be unable to process any further request...
CVE-2024-30251 Denial of service when trying to parse malformed POST requests in aiohttp
aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. In affected versions an attacker can send a specially crafted POST multipart/form-data request. When the aiohttp server processes it, the server will enter an infinite loop and be unable to process any further request...
Duplicate Advisory: sqlparse parsing heavily nested list leads to Denial of Service
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-2m57-hf25-phgg. This link is maintained to preserve external references. Original Description Passing a heavily nested list to sqlparse.parse leads to a Denial of Service due to RecursionError...
GHSA-GHR5-CH3P-VCR6 vulnerabilities
Vulnerabilities for packages: lerna...