144 matches found
Missing Authorization
Overview Affected versions of this package are vulnerable to Missing Authorization via the label process. An attacker can obtain sensitive information by accessing labels associated with private organizations without proper authorization. Remediation Upgrade...
Incorrect Authorization
Overview Affected versions of this package are vulnerable to Incorrect Authorization in the pre-receive process. An attacker can gain unauthorized write access to the entire repository by exploiting cached branch-specific write-permission results across multiple refs within a single session...
repository-service-tuf (>=0.8.2b1, <=0.11.0b1) potentially affected by unknown CVE via tuf (3.1.0)
tuf PYPI version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on tuf and may be impacted: - repository-service-tuf =0.8.2b1, =0.11.0b1 Source cves: unknown CVE Source advisory: OSV:GHSA-QP9X-WP8F-QGJJ...
repository-service-tuf (>=0.5.0b1, <=0.8.1b1), tufup (>=0.5.0, <=0.5.1) potentially affected by unknown CVE via tuf (3.0.0)
tuf PYPI version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on tuf and may be impacted: - repository-service-tuf =0.5.0b1, =0.5.0, =0.5.1 Source cves: unknown CVE Source advisory: OSV:GHSA-QP9X-WP8F-QGJJ...
repository-service-tuf (>=0.0.1a7, <=0.4.0b1), tufup (0.4.9) potentially affected by unknown CVE via tuf (2.0.0)
tuf PYPI version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on tuf and may be impacted: - repository-service-tuf =0.0.1a7, =0.4.0b1 - tufup 0.4.9 Source cves: unknown CVE Source advisory: OSV:GHSA-QP9X-WP8F-QGJJ...
PT-2026-39254
Name of the Vulnerable Software and Affected Versions free5GC versions prior to 4.2.2 Description The UDR nudr-dr handler in free5GC contains an issue where a single authenticated request can cause a panic. This occurs when a request is made to the endpoint "DELETE...
free5GC security vulnerabilities
free5GC is an open-source project for the 5th generation 5G mobile core network. Versions of free5GC prior to 4.2.1 contained security vulnerabilities. These vulnerabilities stemmed from the PUT request handler in the UDR service, which failed to properly return values after request parsing or...
Incorrect Authorization
Overview Affected versions of this package are vulnerable to Incorrect Authorization via inadequate enforcement of branch delete permissions after merging a pull request. An attacker can delete arbitrary branches. Remediation Upgrade github.com/go-gitea/gitea/services/repository to version 1.22.5...
EUVD-2020-12019
Malware in sbrugna...
EUVD-2020-12065
Malware in sbrugna...
EUVD-2020-12064
Malware in sbrugna...
EUVD-2020-12066
Malware in sbrugna...
EUVD-2020-12011
Malware in sbrugna...
EUVD-2020-2382
Malware in sbrugna...
EUVD-2020-12069
Malware in sbrugna...
EUVD-2020-12070
Malware in sbrugna...
EUVD-2020-12016
Malware in sbrugna...
EUVD-2020-12067
Malware in sbrugna...