EUVD-2022-33573

Malicious code in bioql PyPI...

Remote code execution

Sourcegraph is a fast and featureful code search and navigation engine. Versions before 3.38.0 are vulnerable to Remote Code Execution in the gitserver service. The Gitolite code host integration with Phabricator allows Sourcegraph site admins to specify a callsignCommand, which is used to obtain...

GNOME file-roller 路径遍历漏洞

GNOME file-roller is a compressed file manager used in the GNOME desktop. A path traversal vulnerability exists in GNOME file-roller version 3.38.0 and prior versions, which stems from allowing directory traversal during extraction...

PT-2021-5613 · Gnome +8 · File Roller +8

Name of the Vulnerable Software and Affected Versions: File Roller versions through 3.38.0 Description: The issue is related to a directory traversal vulnerability during extraction, caused by the lack of a check for whether a file's parent is a symlink in certain complex situations. This...