154 matches found
CVE-2023-44270
An issue was discovered in PostCSS before 8.4.31. The vulnerability affects linters using PostCSS to parse external untrusted CSS. An attacker can prepare CSS in such a way that it will contains parts parsed by PostCSS as a CSS comment. After processing by PostCSS, it will be included in the...
CVE-2023-36830
CVE-2023-36830 affects SQLFluff prior to v2.1.2 where an attacker with access to config files could abuse the library_path setting to execute arbitrary Python code via Jinja/macros. The issue arises when untrusted users can view or modify config and leverage library_path to reach Python execution...
CVE-2023-36830
SQLFluff is a SQL linter. Prior to version 2.1.2, in environments where untrusted users have access to the config files, there is a potential security vulnerability where those users could use the librarypath config value to allow arbitrary python code to be executed via macros. For many users wh...
Fedora: Security Advisory for rust-sequoia-keyring-linter (FEDORA-2023-1d0d71b6aa)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 37 Update: rust-sequoia-keyring-linter-1.0.1-2.fc37
A linter for keyrings...
SUSE-SU-2023:1901-1 Security update for helm
This update for helm fixes the following issues: Update to version 3.11.2: choredeps: bump github.com/rubenv/sql-migrate from 1.2.0 to 1.3.1 the linter varcheck and deadcode are deprecated since v1.49.0 fix template --output-dir issue build against a supported go version: go1.19 bsc1209670...
vulhub
This is a collection of vulnerable web applications and tools for testing and learning about web application security. The repository contains a variety of applications, including CouchDB, FFmpeg, Git, and Jenkins, each with its own set of vulnerabilities. The applications are designed to be used...
XXE vulnerability on agents in Jenkins OSF Builder Suite : : XML Linter Plugin
OSF Builder Suite : : XML Linter 1.0.2 and earlier does not configure its XML parser to prevent XML external entity XXE attacks. This allows attackers able to control XML files that get processed by the 'OSF Builder Suite : : XML Linter' build step to have agent processes parse a crafted file tha...
GHSA-8847-XVJW-9G43 XXE vulnerability on agents in Jenkins OSF Builder Suite : : XML Linter Plugin
OSF Builder Suite : : XML Linter 1.0.2 and earlier does not configure its XML parser to prevent XML external entity XXE attacks. This allows attackers able to control XML files that get processed by the 'OSF Builder Suite : : XML Linter' build step to have agent processes parse a crafted file tha...
CVE-2022-45397
Jenkins OSF Builder Suite : : XML Linter Plugin 1.0.2 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...
CVE-2022-45397
Jenkins OSF Builder Suite : : XML Linter Plugin 1.0.2 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...
Xxe
Jenkins OSF Builder Suite : : XML Linter Plugin 1.0.2 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...
PT-2022-27499 · Jenkins · Jenkins Osf Builder Suite : : Xml Linter Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins OSF Builder Suite : : XML Linter Plugin versions 1.0.2 and earlier Description: The issue arises from the XML parser not being configured to prevent XML external entity XXE attacks. This allows attackers who can control XML files...
Jenkins Plugin OSF Builder Suite :: XML Linter 代码问题漏洞
Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application. An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. Jenkins Plugin A code issu...
CVE-2022-45397
Jenkins OSF Builder Suite : : XML Linter Plugin 1.0.2 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...
CVE-2022-45397
Jenkins OSF Builder Suite : : XML Linter Plugin 1.0.2 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...
CVE-2022-45397
CVE-2022-45397 : Jenkins OSF Builder Suite — XML Linter Plugin (versions 1.0.2 and earlier) is vulnerable to XML External Entity (XXE) attacks because the plugin’s XML parser is not configured to disable external entities. This allows an attacker who can control XML input processed by the OSF Bui...
Fedora: Security Advisory for golang-github-golangci-lint-1 (FEDORA-2022-3969b64d4b)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...