[SECURITY] Fedora 36 Update: golang-x-lint-0-17.20210123git83fdc39.fc36

Golint is a linter for Go source code...

Fedora: Security Advisory for golang-github-golangci-lint-1 (FEDORA-2022-3969b64d4b)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

The vulnerability of the modular interface between web servers and web applications in Rack, related to improper neutralization of special elements used in operating system commands, allows attackers to execute arbitrary shell commands on the target system.

The vulnerability of the modular interface between web servers and web applications in Rack is related to improper input validation during data processing. This issue occurs when data is transmitted through the intermediate software Rack Lint and CommonLogger. Exploiting this vulnerability allows...

Fedora: Security Advisory for golang-x-lint (FEDORA-2022-fae3ecee19)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for golang-github-golangci-lint-1 (FEDORA-2022-fae3ecee19)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 36 Update: golang-x-lint-0-16.20210123git83fdc39.fc36

Golint is a linter for Go source code...

Malicious Package

Overview @kraken-frontend/eslint-config is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if...

CVE-2022-30123

A flaw was found in ruby gem-rack. This flaw allows a malicious actor to craft requests that can cause shell escape sequences to be written to the terminal via rack's Lint middleware and CommonLogger middleware. This issue can leverage these escape sequences to execute commands in the victim's...

Malicious code in lint-config-qiwi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 82e79286ad9f157e9ada13b80515e00e1ad6d6c2ba5ef082e276af3e9da6d390 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4316 Malicious code in lint-config-qiwi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 82e79286ad9f157e9ada13b80515e00e1ad6d6c2ba5ef082e276af3e9da6d390 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4317 Malicious code in lint-staged-var (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4da4b87a4c269a9789a5a70dfbc44c6335dc52f7685106953c6074d368e4f4af Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lint-staged-var (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4da4b87a4c269a9789a5a70dfbc44c6335dc52f7685106953c6074d368e4f4af Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-989 Malicious code in analyticsdx-template-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 24437e0bf1c2b1f49f31fc1e61ceaa8f0ff83d2be2aa44437ecfae2642eb0788 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in analyticsdx-template-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 24437e0bf1c2b1f49f31fc1e61ceaa8f0ff83d2be2aa44437ecfae2642eb0788 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

OS Command Injection

rack is vulnerable to OS command injection. The vulnerability exists in log function in CommonLogger and Lint middleware because of the escape sequences which allows an attacker to execute shell commands...

Arbitrary Code Injection

Overview rack is a minimal, modular and adaptable interface for developing web applications in Ruby. By wrapping HTTP requests and responses in the simplest way possible, it unifies and distills the API for web servers, web frameworks, and software in between the so-called middleware into a singl...

GHSA-WQ4H-7R42-5HRR Possible shell escape sequence injection vulnerability in Rack

There is a possible shell escape sequence injection vulnerability in the Lint and CommonLogger components of Rack. This vulnerability has been assigned the CVE identifier CVE-2022-30123. Versions Affected: All. Not affected: None Fixed Versions: 2.0.9.1, 2.1.4.1, 2.2.3.1 Impact Carefully crafted...

Possible shell escape sequence injection vulnerability in Rack

There is a possible shell escape sequence injection vulnerability in the Lint and CommonLogger components of Rack. This vulnerability has been assigned the CVE identifier CVE-2022-30123. Versions Affected: All. Not affected: None Fixed Versions: 2.0.9.1, 2.1.4.1, 2.2.3.1 Impact Carefully crafted...

PT-2022-3423

Name of the Vulnerable Software and Affected Versions Rack versions prior to 2.0.9.1 Rack versions prior to 2.1.4.1 Rack versions prior to 2.2.3.1 Description A sequence injection vulnerability exists in Rack, which could allow a possible shell escape in the Lint and CommonLogger components. This...

GHSA-28X9-HC4P-9VH2 Stored XSS vulnerability in android-lint Plugin

Jenkins Android Lint Plugin 2.6 and earlier does not escape the annotation message in tooltips, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers able to provide report files to the plugin's post-build step...