362 matches found
GHSA-JM77-QPHF-C4W8 vulnerabilities
Vulnerabilities for packages: conda, py3-cassandra-medusa, mitmproxy...
GHSA-JM77-QPHF-C4W8 vulnerabilities
Vulnerabilities for packages: mitmproxy, py3-cassandra-medusa, conda...
Security Bulletin: Vulnerability in certifi-2018.4.16-py2.py3 affects IBM Cloud Pak for Data System 1.0(CPDS 1.0) [CVE-2022-23491]
Summary The certifi-2018.4.16-py2.py3 package is used by IBM Cloud Pak for Data System 1.0. IBM Cloud Pak for Data System 1.0 has addressed the applicable CVE CVE-2022-23491. Vulnerability Details CVEID:CVE-2022-23491 DESCRIPTION: An unspecified error in with TrustCor's ownership also operated a...
GHSA-5CPQ-8WJ7-HF2V vulnerabilities
Vulnerabilities for packages: mitmproxy, py3-cassandra-medusa, conda...
GHSA-5CPQ-8WJ7-HF2V vulnerabilities
Vulnerabilities for packages: conda, py3-cassandra-medusa, mitmproxy...
CVE-2022-41723 vulnerabilities
Vulnerabilities for packages: kubeflow, dynamic-localpv-provisioner, kubeflow-katib, hey, terraform-provider-sendgrid, go, grpcurl, kubeflow-fips, kube-state-metrics, restic, k3d, wireguard-go, terraform-provider-sendgrid-fips, gke-gcloud-auth-plugin, dynamic-localpv-provisioner-fips...
GHSA-VVPX-J8F3-3W6H vulnerabilities
Vulnerabilities for packages: kubeflow, dynamic-localpv-provisioner, kubeflow-katib, hey, terraform-provider-sendgrid, go, grpcurl, kubeflow-fips, kube-state-metrics, restic, k3d, wireguard-go, terraform-provider-sendgrid-fips, gke-gcloud-auth-plugin, dynamic-localpv-provisioner-fips...
Malicious code in ticket-parser2-py3 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1c4ed8944d1857578a442a65eb150261698ec277d1abc7ec86756286f5904cef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-890 Malicious code in ticket-parser2-py3 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1c4ed8944d1857578a442a65eb150261698ec277d1abc7ec86756286f5904cef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2022-41721 vulnerabilities
Vulnerabilities for packages: kyverno...
Denial Of Service (DoS)
py3-rencode is vulnerable to denial of service. The vulnerability exists due to an infinite loop in typecode decoding enabling a remote attacker to cause a memory consumption resulting in an application crash...
GHSA-69CG-P879-7622 vulnerabilities
Vulnerabilities for packages: kubeflow, dynamic-localpv-provisioner, kubeflow-katib, hey, terraform-provider-sendgrid, kubeflow-fips, kube-state-metrics, k3d, wireguard-go, terraform-provider-sendgrid-fips, grpcurl, dynamic-localpv-provisioner-fips...
CVE-2022-27664 vulnerabilities
Vulnerabilities for packages: kubeflow, dynamic-localpv-provisioner, kubeflow-katib, hey, terraform-provider-sendgrid, kubeflow-fips, kube-state-metrics, k3d, wireguard-go, terraform-provider-sendgrid-fips, grpcurl, dynamic-localpv-provisioner-fips...
HTTP Request Smuggling
py3-werkzeug is vulnerable to http request smuggling. The vulnerability exists in .pre-commit-config.yaml because of missing dependents which allows an attacker to perform HTTP Request Smuggling using a crafted HTTP request...
Regular Expression Denial Of Service (ReDoS)
py3-mistune is vulnerable to regular expression denial of service. An attacker is able crash the system by injecting a maliciously crafted string into ASTERISKEMPHASIS...
GHSA-R48Q-9G5R-8Q2H vulnerabilities
Vulnerabilities for packages: kubeflow-fips, kube-state-metrics, kubeflow...
dfnclient (>=0.0.1 <=0.4.6), django-afip (>=1.0.2 <=2.2.1) +2 more potentially affected by CVE-2013-2217 via suds-py3 (>=1.0.0.0 <=1.4.1.0)
suds-py3 PYPI version =1.0.0.0, =0.0.1, =1.0.2, =0.9.0, =0.0.1, =0.0.8 Source cves: CVE-2013-2217 Source advisory: OSV:GHSA-VPQP-HX68-P2WX...
GHSA-8C26-WMH5-6G9V vulnerabilities
Vulnerabilities for packages: kubeflow, dynamic-localpv-provisioner, terraform-provider-sendgrid, kubeflow-fips, k3d, terraform-provider-sendgrid-fips, dynamic-localpv-provisioner-fips...