Lucene search
K

7 matches found

OSV
OSV
added 2025/07/02 4:59 a.m.2 views

USN-7612-1 python-flask-cors vulnerabilities

It was discovered that Flask-CORS did not correctly handle certain regular expressions. A remote attacker could possibly use this issue to leak sensitive information or bypass authentication mechanisms. CVE-2024-6839 It was discovered that Flask-CORS allowed certain CORS headers to be enabled by...

7.5CVSS6.8AI score0.00637EPSS
Exploits5References6
SUSE CVE
SUSE CVE
added 2023/02/15 5:52 a.m.3 views

SUSE CVE-2011-2614

The SVG implementation in Opera before 11.50 allows remote attackers to cause a denial of service application crash via vectors involving a path on which many characters are drawn...

5CVSS6.8AI score0.00535EPSS
Exploits1References3
OSV
OSV
added 2021/05/24 4:56 p.m.24 views

GHSA-9VP5-M38W-J776 Aliases are never checked in helm

Impact During a security audit of Helm's code base, security researchers at Trail of Bits identified a bug in which the alias field on a Chart.yaml is not properly sanitized. This could lead to the injection of unwanted information into a chart. Patches This issue has been patched in Helm 3.3.2 a...

3.7CVSS4.3AI score0.00234EPSS
Exploits0References5
Github Security Blog
Github Security Blog
added 2021/05/24 4:56 p.m.59 views

Aliases are never checked in helm

Impact During a security audit of Helm's code base, security researchers at Trail of Bits identified a bug in which the alias field on a Chart.yaml is not properly sanitized. This could lead to the injection of unwanted information into a chart. Patches This issue has been patched in Helm 3.3.2 a...

4CVSS5.4AI score0.00234EPSS
Exploits0References5Affected Software2
GitLab Advisory Database
GitLab Advisory Database
added 2021/05/24 12:0 a.m.33 views

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

In Helm before versions 2.16.11 and 3.3.2 there is a bug in which the alias field on a Chart.yaml is not properly sanitized. This could lead to the injection of unwanted information into a chart. This issue has been patched in Helm 3.3.2 and 2.16.11. A possible workaround is to manually review th...

4CVSS2.4AI score0.00234EPSS
Exploits0References5Affected Software1
OSV
OSV
added 2020/09/17 9:15 p.m.20 views

CVE-2020-15184

In Helm before versions 2.16.11 and 3.3.2 there is a bug in which the alias field on a Chart.yaml is not properly sanitized. This could lead to the injection of unwanted information into a chart. This issue has been patched in Helm 3.3.2 and 2.16.11. A possible workaround is to manually review th...

2.7CVSS6.6AI score
Exploits0References2
Cvelist
Cvelist
added 2020/09/17 8:40 p.m.21 views

CVE-2020-15184 Aliases are never checked in Helm

In Helm before versions 2.16.11 and 3.3.2 there is a bug in which the alias field on a Chart.yaml is not properly sanitized. This could lead to the injection of unwanted information into a chart. This issue has been patched in Helm 3.3.2 and 2.16.11. A possible workaround is to manually review th...

3.7CVSS4.3AI score0.00234EPSS
Exploits0References2
Rows per page
Query Builder