CVE-2024-31455 Minder GetRepositoryByName data leak

Minder by Stacklok is an open source software supply chain security platform. A refactoring in commit 5c381cf added the ability to get GitHub repositories registered to a project without specifying a specific provider. Unfortunately, the SQL query for doing so was missing parenthesis, and would...

CVE-2024-31455

Minder by Stacklok is an open source software supply chain security platform. A refactoring in commit "5c381cf" added the ability to get GitHub repositories registered to a project without specifying a specific provider. Unfortunately, the SQL query for doing so was missing parenthesis, and would...

PT-2024-24089

Name of the Vulnerable Software and Affected Versions Minder by Stacklok versions prior to the version that includes pull request 2941 Description A recent refactoring added the ability to get GitHub repositories registered to a project without specifying a specific provider. Unfortunately, the S...