49 matches found
CVE-2022-27201
Jenkins Semantic Versioning Plugin 1.13 and earlier does not restrict execution of an controller/agent message to agents, and implements no limitations about the file path that can be parsed, allowing attackers able to control agent processes to have Jenkins parse a crafted file that uses externa...
PT-2022-18288 · Jenkins · Jenkins Semantic Versioning Plugin +2
Name of the Vulnerable Software and Affected Versions: Jenkins Semantic Versioning Plugin versions 1.13 and earlier Jenkins versions 2.318 and earlier Jenkins LTS versions 2.303.2 and earlier Description: The issue allows attackers to control agent processes and have Jenkins parse a crafted file,...
GHSA-44C6-4V22-4MHX semver-regex Regular Expression Denial of Service (ReDOS)
npm semver-regex is vulnerable to Inefficient Regular Expression Complexity...
CVE-2021-3795
semver-regex is vulnerable to Inefficient Regular Expression Complexity...
semver-regex 安全漏洞
semver-regex is a regular expression used to match semver versions. A security vulnerability exists in semver-regex that stems from semver-regex's susceptibility to inefficient regular expression complexity...
USN-4776-1 node-semver vulnerability
It was discovered that semver incorrectly handled certain inputs. A remote attacker could possibly use this issue to cause a denial of service...
Information Disclosure
Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments. This advisory contains the RPM packages for Red Hat OpenShift Container Platform 3.11.51. See the following advisory for the container...
Joyent Node.js semver denial of service vulnerability
Joyent Node.js is a web application platform built on top of Google's V8 JavaScript engine. semver is a semantic version control specification module in npm. A denial of service vulnerability exists in Joyent Node.js semver, where the program fails to properly parse long version strings, allowing...
