384 matches found
Ivy
THIS REPOSITORY HAS BEEN ARCHIVED To view the latest version of Ivy or to submit an issue, reference https://github.com/Tylous/Ivy. More Information If you want to learn more about the techniques utilized in this framework as well as the defensive measure to help defend against it, please take a...
Security Bulletin: IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is affected by a Path Traversal Vulnerability in Apache Ivy (CVE-2026-26032)
Summary IBM DevOps Deploy / IBM UrbanCode Deploy UCD uses Apache Ivy as part of its plugin system. CVE-2026-26032 Vulnerability Details CVEID:CVE-2026-26032 DESCRIPTION: The PackagerResolver of Apache Ivy is able to download online artifacts and to repackage them in a format defined by a...
Medium: apache-ivy
Issue Overview: The PackagerResolver of Apache Ivy is able to download online artifacts and to repackage them in a format defined by a packager.xml file. This repackaging is done by an Ant script, which is stored in a subdirectory of the configured "buildRoot" directory. This subdirectory is...
Amazon Linux 2 : apache-ivy (ALAS-2026-3993)
The version of apache-ivy installed on the remote host is prior to 2.3.0-4. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3993 advisory. The PackagerResolver of Apache Ivy is able to download onlineartifacts and to repackage them in a format defined by apackager.xm...
Medium: apache-ivy
Issue Overview: The PackagerResolver of Apache Ivy is able to download online artifacts and to repackage them in a format defined by a packager.xml file. This repackaging is done by an Ant script, which is stored in a subdirectory of the configured "buildRoot" directory. This subdirectory is...
Amazon Linux 2023 : apache-ivy, apache-ivy-javadoc (ALAS2023-2026-3207)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3207 advisory. The PackagerResolver of Apache Ivy is able to download onlineartifacts and to repackage them in a format defined by apackager.xml file. This repackaging is done by an Ant script, which isstored in a...
Security Bulletin: IBM SPSS Modeler is affected by an Apache Ivy path traversal vulnerability that could allow arbitrary file overwrite during package processing
Summary IBM SPSS Modeler is affected by an Apache Ivy path traversal vulnerability that could allow arbitrary file overwrite during package processing. This has been addressed in the remediation section. Vulnerability Details CVEID:CVE-2026-26032 DESCRIPTION: The PackagerResolver of Apache Ivy is...
Path Traversal
Apache Ivy is vulnerable to Path Traversal. The vulnerability is due to insufficient validation of module coordinates in the PackagerResolver, where the calculated subdirectory path based on coordinates such as organisation, name, or version is concatenated with the buildRoot directory and an...
Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: xhci: Device endpoints are removed from the bandwidth list when the device is freed. Endpoints are normally deleted from the bandwidth list when they are dropped, before the virt device is freed. If the xHCI host is dying or bein...
Malicious code in ivy-vt5ig-u6rtm-terra-project (npm)
The package ivy-vt5ig-u6rtm-terra-project was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in ivy-z3xgp-yt7sr-ember-project (npm)
The package ivy-z3xgp-yt7sr-ember-project was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in ivy-volcano-085d (npm)
The package ivy-volcano-085d was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in ivy-wasabi-5glb (npm)
The package ivy-wasabi-5glb was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in ivy-6m9fb-tsi90-fable-project (npm)
The package ivy-6m9fb-tsi90-fable-project was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in ivy-i8xdk-583dw-kelp-project (npm)
The package ivy-i8xdk-583dw-kelp-project was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in ivy-sierra-iu11 (npm)
The package ivy-sierra-iu11 was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in ivy-kuiper-gvol (npm)
The package ivy-kuiper-gvol was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in ivy-fnddb-h7jq1-twilight-project (npm)
The package ivy-fnddb-h7jq1-twilight-project was found to contain malicious code. --- Credit: OpenSSF source...