41 matches found
Malicious code in isomorphic-core (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 77d4d391965bb7a4c11a66a561e0658812b791204239bf258a2d48675c730c8f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-3968 Malicious code in isomorphic-core (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 77d4d391965bb7a4c11a66a561e0658812b791204239bf258a2d48675c730c8f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @clover-microapp/utils-isomorphic (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 482eb0aee6eec7e82d910ad31d6b3b39e0f154377bc5ae979f98fa6b984fae01 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Server side request forgery in @isomorphic-git/cors-proxy
The package @isomorphic-git/cors-proxy before 2.7.1 is vulnerable to Server-side Request Forgery SSRF due to missing sanitization and validation of the redirection action in middleware.js...
GHSA-V82V-RQ72-PHQ9 Server side request forgery in @isomorphic-git/cors-proxy
The package @isomorphic-git/cors-proxy before 2.7.1 is vulnerable to Server-side Request Forgery SSRF due to missing sanitization and validation of the redirection action in middleware.js...
CVE-2021-23664
CVE-2021-23664 affects @isomorphic-git/cors-proxy before 2.7.1. The vulnerability is Server-side Request Forgery (SSRF) due to missing sanitization and validation of the redirection action in middleware.js. Exploitation details and public disclosures are present in connected advisories (GHSA/Snyk...
CVE-2021-23664
The package @isomorphic-git/cors-proxy before 2.7.1 are vulnerable to Server-side Request Forgery SSRF due to missing sanitization and validation of the redirection action in middleware.js...
isomorphic-git 代码问题漏洞
isomorphic-git is a pure JavaScript implementation of open source git for node and browser environments including WebWorkers and ServiceWorkers. A security vulnerability exists in isomorphic-git cors-proxy versions prior to 2.7.1, which stems from a lack of cleanup and validation of redirect...
Server-side Request Forgery (SSRF)
Overview @isomorphic-git/cors-proxy is a Proxy clone and push requests for the browser Affected versions of this package are vulnerable to Server-side Request Forgery SSRF due to missing sanitization and validation of the redirection action in middleware.js. PoC GET...
GHSA-FGXQ-P49F-QW99 Directory Traversal in isomorphic-git
isomorphic-git before 1.8.2 allows Directory Traversal via a crafted repository...
Directory Traversal in isomorphic-git
isomorphic-git before 1.8.2 allows Directory Traversal via a crafted repository...
@adobe/git-server (>=1.3.6, <=1.3.18), @adobe/helix-cli (>=8.1.0, <=13.4.15) +12 more potentially affected by CVE-2021-30483 via isomorphic-git (>=1.1.4, <=1.8.1)
isomorphic-git NPM version =1.1.4, =1.3.6, =8.1.0, =1.0.0, =5.1.1, =2.9.0, =1.0.24, =2.4.1, =1.2.0, =0.1.0, =4.0.1-next.443, =2.3.1-beta.0, =2.10.4, =1.0.0, =1.0.1 Source cves: CVE-2021-30483 Source advisory: OSV:GHSA-FGXQ-P49F-QW99...
isomorphic-git path traversal vulnerability
isomorphic-git is a pure JavaScript implementation of open source git for node and browser environments including WebWorkers and ServiceWorkers. isomorphic-git is vulnerable to path traversal prior to 1.8.2, which stems from the fact that isomorphic-git allows directory traversal via carefully...
CVE-2021-30483
A flaw was found in isomorphic-git. An attacker could cause a Directory Traversal via a crafted filepath in a repository being cloned...
CVE-2021-30483
isomorphic-git before 1.8.2 allows Directory Traversal via a crafted repository...
CVE-2021-30483
isomorphic-git before 1.8.2 allows Directory Traversal via a crafted repository...
CVE-2021-30483
isomorphic-git before 1.8.2 allows Directory Traversal via a crafted repository...
Directory traversal
isomorphic-git before 1.8.2 allows Directory Traversal via a crafted repository...
isomorphic-git 路径遍历漏洞
isomorphic-git is a pure JavaScript implementation of open source git for node and browser environments including WebWorkers and ServiceWorkers. isomorphic-git is vulnerable to path traversal prior to 1.8.2, which stems from the fact that isomorphic-git allows directory traversal via carefully...
