dbt-loom (>=0.1.2, <=0.3.1), dbt-postgres (>=1.6.0, <=1.6.13) +5 more potentially affected by CVE-2024-40637 via dbt-core (>=1.6.0, <=1.6.13)

dbt-core PYPI version =1.6.0, =0.1.2, =1.6.0, =1.3.0, =1.6.0, =1.6.0, =0.0.1, =0.0.11 Source cves: CVE-2024-40637 Source advisory: GHSA-P3F3-5CCG-83XQ...

dbt-loom (>=0.1.2, <=0.3.1), dbt-postgres (>=1.6.0, <=1.6.13) +5 more potentially affected by CVE-2024-40637 via dbt-core (>=1.6.0, <=1.6.13)

dbt-core PYPI version =1.6.0, =0.1.2, =1.6.0, =1.3.0, =1.6.0, =1.6.0, =0.0.1, =0.0.11 Source cves: CVE-2024-40637 Source advisory: MEND:CVE-2024-40637...

dbt-docs-mcp (0.0.1), dbt-fabric (1.8.4) +1 more potentially affected by CVE-2024-36105 via dbt-core (1.8.0)

dbt-core PYPI version 1.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on dbt-core and may be impacted: - dbt-docs-mcp 0.0.1 - dbt-fabric 1.8.4 - dbt-loom =0.5.3, =0.5.4 Source cves: CVE-2024-36105 Source advisory: OSV:GHSA-PMRX-695R-4349...

dbt-docs-mcp (0.0.1), dbt-fabric (1.8.4) +1 more potentially affected by CVE-2024-36105 via dbt-core (1.8.0)

dbt-core PYPI version 1.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on dbt-core and may be impacted: - dbt-docs-mcp 0.0.1 - dbt-fabric 1.8.4 - dbt-loom =0.5.3, =0.5.4 Source cves: CVE-2024-36105 Source advisory: MEND:CVE-2024-36105...

dbt-loom (>=0.1.2, <=0.3.1), dbt-postgres (>=1.6.0, <=1.6.12) +5 more potentially affected by unknown CVE via dbt-core (>=1.6.0, <=1.6.12)

dbt-core PYPI version =1.6.0, =0.1.2, =1.6.0, =1.3.0, =1.6.0, =1.6.0, =0.0.1, =0.0.11 Source cves: unknown CVE Source advisory: GHSA-P72Q-H37J-3HQ7...

dbt-loom (>=0.1.2, <=0.3.1), dbt-postgres (>=1.6.0, <=1.6.12) +5 more potentially affected by unknown CVE via dbt-core (>=1.6.0, <=1.6.12)

dbt-core PYPI version =1.6.0, =0.1.2, =1.6.0, =1.3.0, =1.6.0, =1.6.0, =0.0.1, =0.0.11 Source cves: unknown CVE Source advisory: OSV:GHSA-P72Q-H37J-3HQ7...

CVE-2024-23742

An issue in Loom on macOS version 0.196.1 and before, allows remote attackers to execute arbitrary code via the RunAsNode and enableNodeClilnspectArguments settings. NOTE: the vendor disputes this because it requires local access to a victim's machine...

CVE-2024-23742

An issue in Loom on macOS version 0.196.1 and before, allows remote attackers to execute arbitrary code via the RunAsNode and enableNodeClilnspectArguments settings. NOTE: the vendor disputes this because it requires local access to a victim's machine...

Code injection

An issue in Loom on macOS version 0.196.1 and before, allows remote attackers to execute arbitrary code via the RunAsNode and enableNodeClilnspectArguments settings. NOTE: the vendor disputes this because it requires local access to a victim's machine...

CVE-2024-23742

An issue in Loom on macOS version 0.196.1 and before, allows remote attackers to execute arbitrary code via the RunAsNode and enableNodeClilnspectArguments settings. NOTE: the vendor disputes this because it requires local access to a victim's machine...

CVE-2024-23742

CVE-2024-23742 affects Loom on macOS 0.196.1 and earlier. The issue enables arbitrary code execution via the RunAsNode and enableNodeClilnspectArguments settings; the vendor contends exploitation requires local access. Connected sources (Red Hat, NVD, CNNVD, CVE listings, PT Security) corroborate...

CVE-2024-23742: Improper Control of Generation of Code

An issue in Loom on macOS version 0.196.1 and before, allows remote attackers to execute arbitrary code via the RunAsNode and enableNodeClilnspectArguments settings. NOTE: the vendor disputes this because it requires local access to a victim's machine...

Loom Security Vulnerabilities

Loom is a free screen recorder for Mac from Loom. A security vulnerability previously existed in Loom version 0.196.1, which stemmed from arbitrary code execution via the RunAsNode and enableNodeClilnspectArguments settings...

CVE-2024-23742

An issue in Loom on macOS version 0.196.1 and before, allows remote attackers to execute arbitrary code via the RunAsNode and enableNodeClilnspectArguments settings. NOTE: the vendor disputes this because it requires local access to a victim's machine...

PT-2024-20050 · Loom · Loom

Name of the Vulnerable Software and Affected Versions: Loom on macOS version 0.196.1 and before Description: An issue in Loom allows remote attackers to execute arbitrary code via the RunAsNode and enableNodeClilnspectArguments settings. The vendor disputes this issue because it requires local...

This Year in Spring - 2023

Welcome to another installment of This Week in Spring! It's December 26th, 2023, and we're staring down the new year! And you know what that means, right? It's time for our annual roundup, looking at all the latest and greatest in the wild and wonderful world of Springdom. This is This Year in...

Spring Tips: Spring Boot 3.2

Hi, Spring fans! In this installment of Spring Tips, I look at the new Spring Boot 3.2 release, due to drop today, the 23rd of November 2023! 23-11-23! We're diving into the cool new features of Spring Boot 3.2 and Java 21. We'll explore how virtual threads from Project Loom make your code run...

What new is coming in reactor-core 3.6.0?

Reactor 3.6.0 is coming and going to be GA on November 14. This blogpost describes new features that are included in this upcoming release! Virtual Threads support Today, everyone talks about Java 21 and Project Loom. The Project Reactor team hears that and sees value in that project within our...

This Week in Spring - September 12th, 2023

Hi, Spring fans! Welcome to another installment of This Week in Spring! How are you this fine 12th of September? I'm doing alright, elated, even. I've just returned from beautiful Oslo, Norway, and I've got a busy 30 days or so ahead, starting today. I'm visiting Seattle, WA; Mexico City, Mexico;...

All together now: Spring Boot 3.2, GraalVM native images, Java 21, and virtual threads with Project Loom,

This has been a very long time in coming, but finally we can create GraalVM native images that use Spring Boot via Spring Boot 3.2 and Java 21's virtual threads Project Loom! Why does all this matter? Each of these individual things, Project Loom, and GraalVM native images, offer compelling runti...