38 matches found
[SECURITY] Fedora 35 Update: golang-github-jsonnet-bundler-0.4.0-8.fc35
A jsonnet package manager...
[SECURITY] Fedora 35 Update: golang-github-google-jsonnet-0.17.0-5.fc35
This an implementation of Jsonnet in pure Go. It is feature complete but is n ot as heavily exercised as the Jsonnet C++ implementation. Please try it out and give feedback...
Fedora: Security Advisory for golang-github-jsonnet-bundler (FEDORA-2022-fae3ecee19)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Fedora: Security Advisory for golang-github-google-jsonnet (FEDORA-2022-fae3ecee19)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 36 Update: golang-github-jsonnet-bundler-0.4.0-8.fc36
A jsonnet package manager...
[SECURITY] Fedora 36 Update: golang-github-google-jsonnet-0.17.0-5.fc36
This an implementation of Jsonnet in pure Go. It is feature complete but is n ot as heavily exercised as the Jsonnet C++ implementation. Please try it out and give feedback...
MAL-2022-4257 Malicious code in language-jsonnet (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 60fdd21fdff47758e3200790bfb1656b0bf0e40d4f43aa2caf326218925f9d95 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in language-jsonnet (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 60fdd21fdff47758e3200790bfb1656b0bf0e40d4f43aa2caf326218925f9d95 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2022-24904 Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Argo CD starting with version 0.7.0 and prior to versions 2.1.15m 2.2.9, and 2.3.4 is vulnerable to a symlink following bug allowing a malicious user with repository write access to leak sensitive files from Argo CD's...
PT-2022-16973 · Argo Cd +1 · Argo Cd +1
Name of the Vulnerable Software and Affected Versions: Argo CD versions 0.7.0 through 2.1.14 Argo CD versions 2.2.0 through 2.2.8 Argo CD versions 2.3.0 through 2.3.3 Description: Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. A malicious user with repository write acce...
CVE-2022-24904
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Argo CD starting with version 0.7.0 and prior to versions 2.1.15m 2.2.9, and 2.3.4 is vulnerable to a symlink following bug allowing a malicious user with repository write access to leak sensitive files from Argo CD's...
WARCannon - High Speed/Low Cost CommonCrawl RegExp In Node.js
WARCannon was built to simplify and cheapify the process of 'grepping the internet'. With WARCannon, you can: Build and test regex patterns against real Common Crawl data Easily load Common Crawl datasets for parallel processing Scale compute capabilities to asynchronously crunch through WARCs at...
jsonnet/convert_jsonnet_fuzzer: Heap-use-after-free in Interpreter::evaluate
Detailed report: https://oss-fuzz.com/testcase?key=5191777033650176 Project: jsonnet Fuzzer: libFuzzerjsonnetconvertjsonnetfuzzer Fuzz target binary: convertjsonnetfuzzer Job Type: libfuzzerasanjsonnet Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x62d00000bc20 Crash...
jsonnet/convert_jsonnet_fuzzer: Heap-use-after-free in Interpreter::evaluate
Detailed report: https://oss-fuzz.com/testcase?key=5651117746159616 Project: jsonnet Fuzzer: libFuzzerjsonnetconvertjsonnetfuzzer Fuzz target binary: convertjsonnetfuzzer Job Type: libfuzzerasanjsonnet Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x6210000128d0 Crash...
jsonnet/convert_jsonnet_fuzzer: Heap-use-after-free in Interpreter::evaluate
Detailed report: https://oss-fuzz.com/testcase?key=5757713826447360 Project: jsonnet Fuzzer: libFuzzerjsonnetconvertjsonnetfuzzer Fuzz target binary: convertjsonnetfuzzer Job Type: libfuzzerasanjsonnet Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x7f07659f9930 Crash...
jsonnet/convert_jsonnet_fuzzer: Crash in Interpreter::manifestJson
Project: https://github.com/google/jsonnet.git Detailed report: https://oss-fuzz.com/testcase?key=6202714083557376 Project: jsonnet Fuzzer: libFuzzerjsonnetconvertjsonnetfuzzer Fuzz target binary: convertjsonnetfuzzer Job Type: libfuzzerubsanjsonnet Platform Id: linux Crash Type: UNKNOWN READ Cra...
jsonnet/convert_jsonnet_fuzzer: Crash in Interpreter::evaluate
Project: https://github.com/google/jsonnet.git Detailed report: https://oss-fuzz.com/testcase?key=5706027058593792 Project: jsonnet Fuzzer: libFuzzerjsonnetconvertjsonnetfuzzer Fuzz target binary: convertjsonnetfuzzer Job Type: libfuzzerubsanjsonnet Platform Id: linux Crash Type: UNKNOWN READ Cra...
jsonnet/convert_jsonnet_fuzzer: Use-of-uninitialized-value in Interpreter::evaluate
Detailed report: https://oss-fuzz.com/testcase?key=5766210858254336 Project: jsonnet Fuzzer: libFuzzerjsonnetconvertjsonnetfuzzer Fuzz target binary: convertjsonnetfuzzer Job Type: libfuzzermsanjsonnet Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...