15322 matches found
CVE-2024-37904
Minder is an open source Software Supply Chain Security Platform. Minder's Git provider is vulnerable to a denial of service from a maliciously configured GitHub repository. The Git provider clones users repositories using the github.com/go-git/go-git/v5 library on lines L55-L89. The Git provider...
CVE-2024-37904 Denial of service from maliciously configured Git repository in Minder
Minder is an open source Software Supply Chain Security Platform. Minder's Git provider is vulnerable to a denial of service from a maliciously configured GitHub repository. The Git provider clones users repositories using the github.com/go-git/go-git/v5 library on lines L55-L89. The Git provider...
CVE-2024-37904 Denial of service from maliciously configured Git repository in Minder
Minder is an open source Software Supply Chain Security Platform. Minder's Git provider is vulnerable to a denial of service from a maliciously configured GitHub repository. The Git provider clones users repositories using the github.com/go-git/go-git/v5 library on lines L55-L89. The Git provider...
CVE-2024-37904
CVE-2024-37904 affects Minder’s Git provider, which can be DoS’d by cloning a large or malicious repository into memory via go-git/go-git/v5. The root cause is that user-controlled Git URLs are cloned without a repository size limit and the entire repo is loaded into memory, enabling memory exhau...
CVE-2024-37904 Denial of service from maliciously configured Git repository in Minder
Minder is an open source Software Supply Chain Security Platform. Minder's Git provider is vulnerable to a denial of service from a maliciously configured GitHub repository. The Git provider clones users repositories using the github.com/go-git/go-git/v5 library on lines L55-L89. The Git provider...
GHSA-HPCG-XJQ5-G666 Minder affected by denial of service from maliciously configured Git repository
Minder's Git provider is vulnerable to a denial of service from a maliciously configured GitHub repository. The Git provider clones users repositories using the github.com/go-git/go-git/v5 library on these lines:...
PT-2024-27820
Name of the Vulnerable Software and Affected Versions Minder versions prior to v0.0.52 Description Minder's Git provider is vulnerable to a denial of service from a maliciously configured GitHub repository. The Git provider clones users' repositories using the github.com/go-git/go-git/v5 library...
Minder Security Vulnerability
Minder is an open source platform that helps development teams and the open source community build more secure software and prove to others that the software they build is secure. A security vulnerability exists in versions prior to Minder v0.0.52 that stems from a maliciously configured Git...
CVE-2024-37904: Uncontrolled Resource Consumption
Minder is an open source Software Supply Chain Security Platform. Minder's Git provider is vulnerable to a denial of service from a maliciously configured GitHub repository. The Git provider clones users repositories using the github.com/go-git/go-git/v5 library on lines L55-L89. The Git provider...
OPENSUSE-SU-2024:13345-1 ctdb-4.19.2+git.322.7e9201cef5-1.1 on GA media
These are all security issues fixed in the ctdb-4.19.2+git.322.7e9201cef5-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:13071-1 ctdb-4.18.5+git.313.c8e274c7852-1.1 on GA media
These are all security issues fixed in the ctdb-4.18.5+git.313.c8e274c7852-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:12625-1 git-2.39.1-1.1 on GA media
These are all security issues fixed in the git-2.39.1-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:13969-1 git-cliff-2.2.2-1.1 on GA media
These are all security issues fixed in the git-cliff-2.2.2-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:12188-1 git-2.37.1-1.1 on GA media
These are all security issues fixed in the git-2.37.1-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:10706-1 csync2-2.0+git.1600444747.83b3644-1.3 on GA media
These are all security issues fixed in the csync2-2.0+git.1600444747.83b3644-1.3 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:12889-1 git-2.40.1-1.1 on GA media
These are all security issues fixed in the git-2.40.1-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:12417-1 git-bug-0.7.2+git.1665512451.0eef939-1.1 on GA media
These are all security issues fixed in the git-bug-0.7.2+git.1665512451.0eef939-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:11937-1 git-delta-0.12.1-1.1 on GA media
These are all security issues fixed in the git-delta-0.12.1-1.1 package on the GA media of openSUSE Tumbleweed...