Lucene search
K

9 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-31664

Malicious code in bioql PyPI...

10CVSS6.6AI score0.00071EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/10/02 8:39 p.m.3 views

CVE-2025-61584

serverless-dns is a RethinkDNS resolver that deploys to Cloudflare Workers, Deno Deploy, Fastly, and Fly.io. Versions through abd including 0.1.30 have a vulnerability where the pr.yml GitHub Action interpolates in an unsafe manner untrusted input, specifically the...

10CVSS7.2AI score0.00071EPSS
Exploits0References1
NVD
NVD
added 2025/09/30 11:37 a.m.1 views

CVE-2025-61584

serverless-dns is a RethinkDNS resolver that deploys to Cloudflare Workers, Deno Deploy, Fastly, and Fly.io. Versions through abd including 0.1.30 have a vulnerability where the pr.yml GitHub Action interpolates in an unsafe manner untrusted input, specifically the...

10CVSS0.00071EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/09/30 12:12 a.m.1 views

CVE-2025-61584 serverless-dns is vulnerable to Command Injection through pr.yml GitHub Action Workflow

serverless-dns is a RethinkDNS resolver that deploys to Cloudflare Workers, Deno Deploy, Fastly, and Fly.io. Versions through abd including 0.1.30 have a vulnerability where the pr.yml GitHub Action interpolates in an unsafe manner untrusted input, specifically the...

10CVSS7AI score0.00071EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/09/30 12:12 a.m.4 views

CVE-2025-61584 serverless-dns is vulnerable to Command Injection through pr.yml GitHub Action Workflow

serverless-dns is a RethinkDNS resolver that deploys to Cloudflare Workers, Deno Deploy, Fastly, and Fly.io. Versions through abd including 0.1.30 have a vulnerability where the pr.yml GitHub Action interpolates in an unsafe manner untrusted input, specifically the...

10CVSS0.00071EPSS
Exploits0References2
CVE
CVE
added 2025/09/30 12:12 a.m.13 views

CVE-2025-61584

serverless-dns (versions up to 0.1.30) contains a vulnerability in the pr.yml GitHub Action where unsafe input (github.event.pull_request.head.repo.clone_url and github.head_ref) is interpolated into a command executed by the runner. Because the action uses the pull_request_target trigger, it run...

10CVSS7AI score0.00071EPSS
Exploits0References2
OSV
OSV
added 2025/09/30 12:12 a.m.1 views

CVE-2025-61584 serverless-dns is vulnerable to Command Injection through pr.yml GitHub Action Workflow

serverless-dns is a RethinkDNS resolver that deploys to Cloudflare Workers, Deno Deploy, Fastly, and Fly.io. Versions through abd including 0.1.30 have a vulnerability where the pr.yml GitHub Action interpolates in an unsafe manner untrusted input, specifically the...

10CVSS7.3AI score0.00071EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2025/09/30 12:0 a.m.2 views

PT-2025-39926

Name of the Vulnerable Software and Affected Versions serverless-dns versions through 0.1.30 Description serverless-dns is a RethinkDNS resolver that deploys to various platforms including Cloudflare Workers, Deno Deploy, Fastly, and Fly.io. A flaw exists where the pr.yml GitHub Action interpolat...

10CVSS7.1AI score0.00071EPSS
Exploits0References7
CNNVD
CNNVD
added 2025/09/30 12:0 a.m.1 views

serverless-dns 命令注入漏洞

serverless-dns is a DNS resolver from serverless-dns open source. A command injection vulnerability exists in serverless-dns version 0.1.30 and earlier, which stems from the pr.yml GitHub Action inserting untrusted input in an insecure manner, which could lead to the execution of attacker code...

10CVSS7.5AI score0.00071EPSS
Exploits0References2
Rows per page
Query Builder