10803 matches found
GHSA-747X-5M58-MQ97 svix vulnerable to Authentication Bypass
Versions of the package svix before 1.17.0 are vulnerable to Authentication Bypass due to an issue in the verify function where signatures of different lengths are incorrectly compared. An attacker can bypass signature verification by providing a shorter signature that matches the beginning of th...
svix vulnerable to Authentication Bypass
Versions of the package svix before 1.17.0 are vulnerable to Authentication Bypass due to an issue in the verify function where signatures of different lengths are incorrectly compared. An attacker can bypass signature verification by providing a shorter signature that matches the beginning of th...
CVE-2024-21491
Versions of the package svix before 1.17.0 are vulnerable to Authentication Bypass due to an issue in the verify function where signatures of different lengths are incorrectly compared. An attacker can bypass signature verification by providing a shorter signature that matches the beginning of th...
Authentication flaw
Versions of the package svix before 1.17.0 are vulnerable to Authentication Bypass due to an issue in the verify function where signatures of different lengths are incorrectly compared. An attacker can bypass signature verification by providing a shorter signature that matches the beginning of th...
CVE-2024-21491
Versions of the package svix before 1.17.0 are vulnerable to Authentication Bypass due to an issue in the verify function where signatures of different lengths are incorrectly compared. An attacker can bypass signature verification by providing a shorter signature that matches the beginning of th...
CVE-2024-21491
Versions of the package svix before 1.17.0 are vulnerable to Authentication Bypass due to an issue in the verify function where signatures of different lengths are incorrectly compared. An attacker can bypass signature verification by providing a shorter signature that matches the beginning of th...
CVE-2024-21491
SVIX before version 1.17.0 is affected by an authentication bypass vulnerability in the Webhook verification logic. The root cause is an incorrect comparison of signatures of different lengths in the verify function, allowing an attacker to bypass signature verification by supplying a shorter sig...
a-gpt (>=0.1.0, <=0.4.0), abacuz (0.1.1) +1150 more potentially affected by unknown CVE via libgit2-sys (>=0.1.13, <=0.15.2+1.6.4)
libgit2-sys CARGO version =0.1.13, =0.1.0, =1.1.0, =0.0.1, =0.3.0, =1.0.0, =0.1.0, =0.1.0, =0.3.3 and more Source cves: unknown CVE Source advisory: OSV:GHSA-22Q8-GHMQ-63VF...
Albabat Ransomware Infiltrates via Counter-Strike Cheat Utility
Summary: Albabat ransomware, made its debut in November 2023, emerging as a financially motivated threat crafted in Rust. This ransomware has targeted both corporate entities and individual consumers across diverse geographical regions. Threat Level - Red | Attack Report For a detailed threat...
abi-stable-host-api (>=0.1.1, <=0.1.13), abi_stable (>=0.2.0, <=0.11.3) +267 more potentially affected by unknown CVE via generational-arena (>=0.1.0, <=0.2.9)
generational-arena CARGO version =0.1.0, =0.1.1, =0.2.0, =0.4.0, =0.4.0, =0.5.0, =0.1.14, =0.1.1, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.1.0, =0.1.0, =0.8.2 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0014...
[SECURITY] Fedora 39 Update: rust-vm-memory-0.14.0-1.fc39
Safe abstractions for accessing the VM physical memory...
[SECURITY] Fedora 39 Update: rust-virtio-queue-0.11.0-1.fc39
Virtio queue implementation...
[SECURITY] Fedora 39 Update: virtiofsd-1.10.1-1.fc39
Virtio-fs vhost-user device daemon Rust version...
[SECURITY] Fedora 39 Update: rust-vhost-0.10.0-2.fc39
A pure rust library for vdpa, vhost and vhost-user...
[SECURITY] Fedora 39 Update: rust-vmm-sys-util-0.12.1-2.fc39
A system utility set...
[SECURITY] Fedora 39 Update: rust-linux-loader-0.11.0-1.fc39
A Linux kernel image loading crate...
[SECURITY] Fedora 39 Update: rust-event-manager-0.4.0-2.fc39
Abstractions for implementing event based systems...
[SECURITY] Fedora 39 Update: rust-versionize-0.2.0-2.fc39
A version tolerant serialization/deserialization framework...