CVE-2022-31151

Authorization headers are cleared on cross-origin redirect. However, cookie headers which are sensitive headers and are official headers found in the spec, remain uncleared. There are active users using cookie headers in undici. This may lead to accidental leakage of cookie to a 3rd-party site or...

Fedora: Security Advisory for golang-github-appc-spec (FEDORA-2022-3969b64d4b)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 35 Update: golang-k8s-kube-openapi-0-0.19.20210813git3c81807.fc35

Kubernetes OpenAPI spec generation & serving...

[SECURITY] Fedora 35 Update: golang-github-grpc-ecosystem-gateway-2-2.7.3-4.fc35

GRPC to JSON proxy generator following the gRPC HTTP spec...

Fedora: Security Advisory for golang-github-appc-spec (FEDORA-2022-fae3ecee19)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 36 Update: golang-k8s-kube-openapi-0-0.21.20210813git3c81807.fc36

Kubernetes OpenAPI spec generation & serving...

[SECURITY] Fedora 36 Update: golang-github-grpc-ecosystem-gateway-2-2.7.3-4.fc36

GRPC to JSON proxy generator following the gRPC HTTP spec...

Upgraded Q -> H from 222 [1656255302682]

Judge has assessed an item in Issue 222 as High risk. The relevant finding follows: L-02 totalAssets of erc4626 should never revert eip-4626 According to the spec, totalAssets of erc4626 should never revert MUST NOT revert. wfcash would revert if it's matured but hasn't settled...

Malicious code in paypal-sdk-spec (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 641111da134e219b032f3fdca4837630c098df34fc322c1d5f6bd41310c85974 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5245 Malicious code in paypal-sdk-spec (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 641111da134e219b032f3fdca4837630c098df34fc322c1d5f6bd41310c85974 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-429 Malicious code in @media-spec/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e0ef3e3e1e84984a709e05770b5d320d7c78d292abdb6b37aa8b83d590e69810 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @media-spec/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e0ef3e3e1e84984a709e05770b5d320d7c78d292abdb6b37aa8b83d590e69810 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6738 Malicious code in ufx-lib-hive-out-spec (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec60fc561183ee81e86ade2d5a35591b6e8739181fb1e187b9829e7ad411c8d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-W3VW-CCC5-QR8V Use After Free in Context::start_auth_session

Impact This issue only applies to applications starting authorization sessions using an explicit initial nonce. When Context::startauthsession was called with a nonce argument value of Some..., the nonce pointer passed down through FFI to EsysStartAuthSession would be a dangling pointer, left ove...

Use After Free in Context::start_auth_session

Impact This issue only applies to applications starting authorization sessions using an explicit initial nonce. When Context::startauthsession was called with a nonce argument value of Some..., the nonce pointer passed down through FFI to EsysStartAuthSession would be a dangling pointer, left ove...

UBUNTU-CVE-2022-29162

runc is a CLI tool for spawning and running containers on Linux according to the OCI specification. A bug was found in runc prior to version 1.1.2 where runc exec --cap created processes with non-empty inheritable Linux process capabilities, creating an atypical Linux environment and enabling...

Fedora: Security Advisory for golang-github-appc-spec (FEDORA-2022-08ae2dd481)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 36 Update: golang-k8s-kube-openapi-0-0.20.20210813git3c81807.fc36

Kubernetes OpenAPI spec generation & serving...

[SECURITY] Fedora 36 Update: golang-github-grpc-ecosystem-gateway-2-2.7.3-3.fc36

GRPC to JSON proxy generator following the gRPC HTTP spec...

militaryspecboxes.com Cross Site Scripting vulnerability OBB-2608503

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...