jsrsasign 安全漏洞

jsrsasign is a signature verification library developed by Kenji Urushima. Versions of jsrsasign from 7.0.0 to 11.1.1 contained security vulnerabilities. These vulnerabilities stemmed from incomplete comparisons in the getRandomBigIntegerZeroToMax and getRandomBigIntegerMinToMax functions located...

The vulnerability of GitLab Pages, a software platform based on Git for collaborative code development on GitLab, allows attackers to influence the integrity of data.

The vulnerability of GitLab Pages, a software platform based on Git for collaborative code development on GitLab, is related to incomplete comparisons with absent factors. Exploiting this vulnerability could allow a malicious actor to influence the integrity of data...