CVE-2023-44487 affecting package ig for versions less than 0.30.0-1

CVE-2023-44487 affecting package ig for versions less than 0.30.0-1. An upgraded version of the package is available that resolves this issue...

CBL Mariner 2.0 Security Update: containerized-data-importer / cri-o / ig / libcontainers-common / skopeo (CVE-2024-3727)

The version of containerized-data-importer / cri-o / ig / libcontainers-common / skopeo installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-3727 advisory. - A flaw was found in the...

CBL Mariner 2.0 Security Update: golang / ig / moby-engine / skopeo (CVE-2022-2879)

The version of golang / ig / moby-engine / skopeo installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-2879 advisory. - Reader.Read does not set a limit on the maximum size of file headers. A malicious...

CBL Mariner 2.0 Security Update: application-gateway-kubernetes-ingress / azcopy / blobfuse2 / cert-manager / coredns (CVE-2023-45288)

The version of application-gateway-kubernetes-ingress / azcopy / blobfuse2 / cert-manager / coredns installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-45288 advisory. - An attacker May cause an HTTP/...

CVE-2023-45288 affecting package ig for versions less than 0.29.0-1

CVE-2023-45288 affecting package ig for versions less than 0.29.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-3727 affecting package ig for versions less than 0.29.0-1

CVE-2024-3727 affecting package ig for versions less than 0.29.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-2879 affecting package ig for versions less than 0.29.0-1

CVE-2022-2879 affecting package ig for versions less than 0.29.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-24786 affecting package ig for versions less than 0.29.0-1

CVE-2024-24786 affecting package ig for versions less than 0.29.0-1. An upgraded version of the package is available that resolves this issue...

AZL-42330 CVE-2024-3727 affecting package ig for versions less than 0.29.0-1

A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks...

AZL-39022 CVE-2023-45288 affecting package ig for versions less than 0.29.0-1

An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames. Maintaining HPACK state requires parsing and processing all HEADERS and CONTINUATION frames on a connection. When a request's headers exceed MaxHeaderBytes, no...

AZL-35783 CVE-2024-24786 affecting package ig for versions less than 0.29.0-1

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...

AZL-42745 CVE-2023-47108 affecting package ig for versions less than 0.30.0-1

OpenTelemetry-Go Contrib is a collection of third-party packages for OpenTelemetry-Go. Starting in version 0.37.0 and prior to version 0.46.0, the grpc Unary Server Interceptor out of the box adds labels net.peer.sock.addr and net.peer.sock.port that have unbound cardinality. It leads to the...

AZL-42750 CVE-2023-44487 affecting package ig for versions less than 0.30.0-1

The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023...

ig-duelmener.de Cross Site Scripting vulnerability OBB-3260178

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

fhir-ig-publisher 路径遍历漏洞

HL7 fhir-ig-publisher is the source code for IG publisher from HL7. A security vulnerability exists in fhir-ig-publisher versions prior to 1.2.30, which originates from a vulnerability that allows attackers to extract files from ZIP or TGZ packages into arbitrary directories via directory travers...

AZL-41765 CVE-2022-2879 affecting package ig for versions less than 0.29.0-1

Reader.Read does not set a limit on the maximum size of file headers. A maliciously crafted archive could cause Read to allocate unbounded amounts of memory, potentially causing resource exhaustion or panics. After fix, Reader.Read limits the maximum size of header blocks to 1 MiB...

Malicious code in ig-influx-reporter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 54886c66dcf047ce39d69f2ae2f1e07d4a7219e38fd8e265e16c1e1e32801f93 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3790 Malicious code in ig-influx-reporter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 54886c66dcf047ce39d69f2ae2f1e07d4a7219e38fd8e265e16c1e1e32801f93 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

ig-prestigerealestate.com Cross Site Scripting vulnerability OBB-2502578

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

ig-fitness-suisse.ch Cross Site Scripting vulnerability OBB-2499788

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...