1162 matches found
Uncontrolled Recursion
Overview std/io/fs is a Go standard library package std/io/fs Affected versions of this package are vulnerable to Uncontrolled Recursion. Go Vulnerability Report: Calling Glob on a path which contains a large number of path separators can cause a panic due to stack exhaustion. Remediation Upgrade...
GO-2022-0527 Stack exhaustion in Glob on certain paths in io/fs
Calling Glob on a path which contains a large number of path separators can cause a panic due to stack exhaustion...
Uncontrolled Recursion
Overview std/path/filepath is a Go standard library package std/path/filepath Affected versions of this package are vulnerable to Uncontrolled Recursion. Go Vulnerability Report: Calling Glob on a path which contains a large number of path separators can cause a panic due to stack exhaustion...
GO-2022-0522 Stack exhaustion on crafted paths in path/filepath
Calling Glob on a path which contains a large number of path separators can cause a panic due to stack exhaustion...
GHSA-CJ88-88MR-972W glob-parent 6.0.0 vulnerable to Regular Expression Denial of Service
glob-parent 6.0.0 is vulnerable to Regular Expression Denial of Service ReDoS. This issue is fixed in version 6.0.1. This vulnerability is separate from GHSA-ww39-953v-wcq6...
@hidoo/express-engine-handlebars (0.8.2), @hidoo/gulp-project-generator (0.19.0) potentially affected by CVE-2021-35065 via glob-parent (6.0.0)
glob-parent NPM version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on glob-parent and may be impacted: - @hidoo/express-engine-handlebars 0.8.2 - @hidoo/gulp-project-generator 0.19.0 Source cves: CVE-2021-35065 Source advisory:...
glob-parent 6.0.0 vulnerable to Regular Expression Denial of Service
glob-parent 6.0.0 is vulnerable to Regular Expression Denial of Service ReDoS. This issue is fixed in version 6.0.1. This vulnerability is separate from GHSA-ww39-953v-wcq6...
PT-2022-10388
Name of the Vulnerable Software and Affected Versions glob-parent versions prior to 6.0.1 Description The issue allows ReDoS regular expression denial of service attacks against the enclosure regular expression in the glob-parent package for Node.js. Recommendations For versions prior to 6.0.1,...
Updated golang packages fix security vulnerability
net/http: improper sanitization of Transfer-Encoding header The HTTP/1 client accepted some invalid Transfer-Encoding headers as indicating a "chunked" encoding. This could potentially allow for request smuggling, but only if combined with an intermediate server that also improperly failed to...
CVE-2022-30630
A flaw was found in the golang standard library, io/fs. Calling Glob on a path that contains a large number of path separators can cause a panic issue due to stack exhaustion. This could allow an attacker to impact availability...
PT-2022-20220
Name of the Vulnerable Software and Affected Versions Go versions prior to 1.17.12 Go versions prior to 1.18.4 Description The issue is related to uncontrolled recursion in Glob in io/fs, which allows an attacker to cause a panic due to stack exhaustion. This can be achieved by providing a path...
PT-2022-20221 · Go +9 · Go +9
Name of the Vulnerable Software and Affected Versions: Go versions prior to 1.17.12 Go versions prior to 1.18.4 Description: The issue is related to uncontrolled recursion in Glob in path/filepath, which allows an attacker to cause a panic due to stack exhaustion via a path containing a large...
new packages: perl-Text-Glob
An update is available for perl-Text-Glob. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...
Perl bsd_glob DoS
The vulnerability of the bsdglob function in the Perl programming language is related to resource release errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...
Slackware: Security Advisory (SSA:2016-308-01)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2022-36901
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description The issue is related to a crash type known as Heap-double-free. The crash state involves functions such as read config and read glob. Recommendations At t...
PT-2022-36884
Name of the Vulnerable Software and Affected Versions No specific software or versions mentioned. Description The issue is related to a heap-double-free crash. The crash state indicates a sequence of function calls: read config, read glob, and read config. No information is available about the...
AlmaLinux 8 : nodejs:14 (ALSA-2022:0350)
The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2022:0350 advisory. nodejs-json-schema: Prototype pollution vulnerability CVE-2021-3918 nodejs-ini: Prototype pollution via malicious INI file CVE-2020-7788 nodejs-glob-paren...
AlmaLinux 8 : nodejs:16 (ALSA-2021:5171)
The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2021:5171 advisory. nodejs-json-schema: Prototype pollution vulnerability CVE-2021-3918 nodejs-ini: Prototype pollution via malicious INI file CVE-2020-7788 nodejs-glob-paren...
nodejs-glob-parent: Regular expression denial of service
A flaw was found in nodejs-glob-parent. The enclosure regex used to check for glob enclosures containing backslashes is vulnerable to Regular Expression Denial of Service attacks. This flaw allows an attacker to cause a denial of service if they can supply a malicious string to the glob-parent...