759 matches found
Malicious code in access-lint (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @mosfe/beam-lint-config (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-1818 Malicious code in @mosfe/beam-lint-config (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @fdfe/eslint-rule-svg-rrggbbaa-check (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in odyssey-lint-staged (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0b408f794010d1926bb9841d26fd28c91c97d8f11d71acea664c92ccb5a06a54 The OpenSSF Package Analysis project identified 'odyssey-lint-staged' @ 9.9.5 npm as malicious. It is considered malicious because: - The packag...
MAL-2024-1145 Malicious code in odyssey-lint-staged (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0b408f794010d1926bb9841d26fd28c91c97d8f11d71acea664c92ccb5a06a54 The OpenSSF Package Analysis project identified 'odyssey-lint-staged' @ 9.9.5 npm as malicious. It is considered malicious because: - The packag...
BIT-GITLAB-2021-39935
An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.5 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2. Unauthorized external users could perform Server Side Requests via the CI Lint API...
CVE-2024-24786 vulnerabilities
Vulnerabilities for packages: crossplane, kine, kube-state-metrics-fips, mc, aactl, grype, pgpool2exporter-fips, helm, kubernetes-csi-livenessprobe-fips, fulcio-fips, prometheus-alertmanager, terraform-provider-sendgrid, prometheus-redis-exporter, gotenberg, dynamic-localpv-provisioner, caddy,...
rubygem-rack: crafted requests can cause shell escape sequences
A flaw was found in ruby gem-rack. This flaw allows a malicious actor to craft requests that can cause shell escape sequences to be written to the terminal via rack's Lint middleware and CommonLogger middleware. This issue can leverage these escape sequences to execute commands in the victim's...
CVE-2022-30123
A sequence injection vulnerability exists in Rack 2.0.9.1, 2.1.4.1 and 2.2.3.1 which could allow is a possible shell escape in the Lint and CommonLogger components of Rack...
DEBIAN-CVE-2022-30123
A sequence injection vulnerability exists in Rack 2.0.9.1, 2.1.4.1 and 2.2.3.1 which could allow is a possible shell escape in the Lint and CommonLogger components of Rack...
UBUNTU-CVE-2022-30123
A sequence injection vulnerability exists in Rack 2.0.9.1, 2.1.4.1 and 2.2.3.1 which could allow is a possible shell escape in the Lint and CommonLogger components of Rack...
CVE-2022-30123
A sequence injection vulnerability exists in Rack 2.0.9.1, 2.1.4.1 and 2.2.3.1 which could allow is a possible shell escape in the Lint and CommonLogger components of Rack...
CVE-2022-30123
A sequence injection vulnerability exists in Rack 2.0.9.1, 2.1.4.1 and 2.2.3.1 which could allow is a possible shell escape in the Lint and CommonLogger components of Rack...
CVE-2022-30123
A sequence injection vulnerability exists in Rack 2.0.9.1, 2.1.4.1 and 2.2.3.1 which could allow is a possible shell escape in the Lint and CommonLogger components of Rack...
rubygem-rack: crafted requests can cause shell escape sequences
A flaw was found in ruby gem-rack. This flaw allows a malicious actor to craft requests that can cause shell escape sequences to be written to the terminal via rack's Lint middleware and CommonLogger middleware. This issue can leverage these escape sequences to execute commands in the victim's...
Fedora: Security Advisory for golang-x-lint (FEDORA-2022-5038c3236c)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 36 Update: golang-x-lint-0-17.20210123git83fdc39.fc36
Golint is a linter for Go source code...
Fedora: Security Advisory for golang-github-golangci-lint-1 (FEDORA-2022-3969b64d4b)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
The vulnerability of the modular interface between web servers and web applications in Rack, related to improper neutralization of special elements used in operating system commands, allows attackers to execute arbitrary shell commands on the target system.
The vulnerability of the modular interface between web servers and Rack web applications is related to improper input validation during data processing, as transmitted through the intermediate software Rack Lint and CommonLogger. Exploiting this vulnerability allows a remote attacker to send...