10 matches found
EUVD-2025-203488
DeepChat is an open-source artificial intelligence agent platform that unifies models, tools, and agents. Prior to version 0.5.3, a security vulnerability exists in the Mermaid diagram rendering component that allows arbitrary JavaScript execution. Due to the exposure of the Electron IPC renderer...
youki 安全漏洞
youki is a youki open source implementation of the OCI runtime specification in Rust. A security vulnerability exists in versions of youki prior to 0.5.3 that stems from a tenant builder accepting a list of features to be added to the tenant container specification during the creation of a tenant...
fossbilling 安全漏洞
fossbilling is a free open source solution for efficient billing and customer management. A security vulnerability exists in fossbilling versions prior to 0.5.3, which stems from improper neutralization of formula elements in CSV files...
PT-2022-24817 · Unknown · Js Compute Runtime
Name of the Vulnerable Software and Affected Versions: JS Compute Runtime versions prior to 0.5.3 Description: The Math.random and crypto.getRandomValues methods fail to use sufficiently random values, making the sequence of random values predictable. An attacker can use the fixed seed to predict...
PT-2022-13114 · Loguru +1 · Loguru +1
Name of the Vulnerable Software and Affected Versions: Conda loguru versions prior to 0.5.3 Description: The issue concerns the insertion of sensitive information into log files and improper privilege management in Conda loguru. Recommendations: For versions prior to 0.5.3, update to version 0.5....
DEBIAN-CVE-2017-11692
The function "Token& Scanner::peek" in scanner.cpp in yaml-cpp 0.5.3 and earlier allows remote attackers to cause a denial of service assertion failure and application exit via a '!2' string...
w3m denial of service vulnerability (CNVD-2016-13130)
w3m is an open source text-based Web browser . A security vulnerability exists in versions of w3m prior to 0.5.3-33. A remote attacker can exploit this vulnerability to cause a denial of service segmentation error and crash with the help of specially crafted HTML pages...
UBUNTU-CVE-2016-9434
An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denial of service segmentation fault and crash via a crafted HTML page...
w3m arbitrary code execution vulnerability (CNVD-2016-11714)
w3m is an open source text-based Web browser . An arbitrary code execution vulnerability exists in versions of w3m prior to 0.5.3-31. An attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service...
w3m arbitrary code execution vulnerability (CNVD-2016-11684)
w3m is an open source text-based Web browser . An arbitrary code execution vulnerability exists in versions of w3m prior to 0.5.3-31. An attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service...