8 matches found
GHSA-JX3Q-5RGF-VRRR xalpha vulnerable to Remote Code Execution
xalpha v0.11.4 is vulnerable to Remote Command Execution RCE. User input is not properly checked to be numerical values prior to being evaluated...
xalpha vulnerable to Remote Code Execution
xalpha v0.11.4 is vulnerable to Remote Command Execution RCE. User input is not properly checked to be numerical values prior to being evaluated...
CVE-2023-37659
xalpha v0.11.4 is vulnerable to Remote Command Execution RCE...
CVE-2023-37659
xalpha v0.11.4 is vulnerable to Remote Command Execution RCE...
Command injection
xalpha v0.11.4 is vulnerable to Remote Command Execution RCE...
CVE-2023-37659
CVE-2023-37659 affects xalpha v0.11.4. A remote command execution vulnerability arises from insufficient input validation when user-supplied data is evaluated, enabling network-based exploitation with high impact (CVSS v3.1: 9.8, HIGH confidentiality/integrity/availability). Multiple sources (GHS...
CVE-2023-37659
xalpha v0.11.4 is vulnerable to Remote Command Execution RCE...
CVE-2023-26054
BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. In affected versions when the user sends a build request that contains a Git URL that contains credentials and the build creates a provenance attestation describing that build,...