Improper Validation of Integrity Check Value

Overview Affected versions of this package are vulnerable to Improper Validation of Integrity Check Value in the chacha20poly1305cipher and aesocbcipher implementations under providers/implementations/ciphers/. An attacker can forge messages by supplying an empty ciphertext and a bad tag, then...

Malicious Package

Overview statist-browser-typed-client-sme.platform.web.teasers is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between th...

Malicious Package

Overview statist-browser-typed-client-nfs.grocery.mobile.events is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between...

Cross-site Scripting (XSS)

Overview hbs is an Express.js template engine plugin for Handlebars Affected versions of this package are vulnerable to Cross-site Scripting XSS via the replaceAsyncValues render path in lib/hbs.js. An attacker can inject script into rendered HTML by supplying attacker-controlled data to a...

Arbitrary Code Injection

Overview Affected versions of this package are vulnerable to Arbitrary Code Injection through the direct-SQL partition-name resolution paths in DirectSqlUpdatePart.getPartitionInfo and MetaStoreDirectSql.getPartitionsByNames. An attacker can cause metastore RPCs to target unintended partitions by...

Improper Authentication

Overview org.apache.hive:hive-service is a package for reading, writing, and managing large datasets residing in distributed storage using SQL. Affected versions of this package are vulnerable to Improper Authentication through the doSamlAuth process in...

Server-side Request Forgery (SSRF)

Overview org.apache.hive:hive-common is a reading, writing, and managing large datasets residing in distributed storage using SQL. Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via Avro SerDe schema resolution in AvroSerdeUtils.determineSchemaOrThrowExceptio...

Server-side Request Forgery (SSRF)

Overview org.apache.hive:hive-exec is a package for reading, writing, and managing large datasets residing in distributed storage using SQL. Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via Avro SerDe schema resolution in...

Malicious Package

Overview supersig is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Improper Input Validation

Overview vrana/adminer is a Database management in a single file. Affected versions of this package are vulnerable to Improper Input Validation in the processing of the X-Forwarded-Prefix header due to improper validation of backslash characters. An attacker can manipulate the Set-Cookie Path...

Improper Input Validation

Overview vrana/adminer is a Database management in a single file. Affected versions of this package are vulnerable to Improper Input Validation via the X-Forwarded-Prefix header. An attacker can manipulate redirect destinations, control the session cookie path attribute, and poison self-referenti...

Server-side Request Forgery (SSRF)

Overview vrana/adminer is a Database management in a single file. Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the server parameter in the login form's validator. An attacker can establish unauthorized TCP connections to internal hosts and ports by...

Arbitrary Code Injection

Overview vrana/adminer is a Database management in a single file. Affected versions of this package are vulnerable to Arbitrary Code Injection via the VACUUM INTO process in SQLite query handling. An attacker can execute arbitrary code on the server by crafting a query that writes PHP code to...

Arbitrary File Upload

Overview vrana/adminer is a Database management in a single file. Affected versions of this package are vulnerable to Arbitrary File Upload via the AdminerFileUpload process. An attacker can achieve remote code execution by uploading malicious PHP files to columns ending with path and executing...

External Control of File Name or Path

Overview vrana/adminer is a Database management in a single file. Affected versions of this package are vulnerable to External Control of File Name or Path via the ns parameter in plugins/sql-log.php. An attacker can write arbitrary .sql files with attacker-controlled content to any writable...

Directory Traversal

Overview vrana/adminer is a Database management in a single file. Affected versions of this package are vulnerable to Directory Traversal via the db parameter in SQLite mode when the database-list drop action does not validate file extensions before deletion. An attacker can delete arbitrary file...

External Control of File Name or Path

Overview vrana/adminer is a Database management in a single file. Affected versions of this package are vulnerable to External Control of File Name or Path via improper sanitization of the server field before constructing a PDO DSN string. An attacker can execute arbitrary code on the server by...

Insecure Randomness

Overview vrana/adminer is a Database management in a single file. Affected versions of this package are vulnerable to Insecure Randomness in the CSRF token generation process. An attacker can recover the session secret and forge valid tokens by observing a single CSRF token, which may be obtained...

Cross-site Scripting (XSS)

Overview vrana/adminer is a Database management in a single file. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the handling of the version string from a connected MySQL server. An attacker can execute arbitrary JavaScript code in the context of the application ...

Directory Traversal

Overview getgrav/grav is a Modern, Crazy Fast, Ridiculously Easy and Amazingly Powerful Flat-File CMS. Affected versions of this package are vulnerable to Directory Traversal via the deleteFile function in the MediaUploadTrait process. An attacker can delete arbitrary files outside the intended...

Symlink Attack

Overview getgrav/grav is a Modern, Crazy Fast, Ridiculously Easy and Amazingly Powerful Flat-File CMS. Affected versions of this package are vulnerable to Symlink Attack via the createLockFile function. An attacker can overwrite arbitrary files by pre-creating symbolic links at predictable lock...

Timing Attack

Overview getgrav/grav is a Modern, Crazy Fast, Ridiculously Easy and Amazingly Powerful Flat-File CMS. Affected versions of this package are vulnerable to Timing Attack via the verifyNonce function. An attacker can recover valid nonce values by measuring response timing differences through multip...

Origin Validation Error

Overview getgrav/grav is a Modern, Crazy Fast, Ridiculously Easy and Amazingly Powerful Flat-File CMS. Affected versions of this package are vulnerable to Origin Validation Error in the referrer process. An attacker can gain unauthorized access or perform actions as a trusted origin by supplying ...

Information Exposure

Overview getgrav/grav is a Modern, Crazy Fast, Ridiculously Easy and Amazingly Powerful Flat-File CMS. Affected versions of this package are vulnerable to Information Exposure in the Twig rendering process. An attacker can access sensitive configuration values by leveraging page-content edit...

Directory Traversal

Overview getgrav/grav is a Modern, Crazy Fast, Ridiculously Easy and Amazingly Powerful Flat-File CMS. Affected versions of this package are vulnerable to Directory Traversal via the mediadirectory function. An attacker can enumerate and access files outside the intended scope by supplying...

Insufficiently Protected Credentials

Overview getgrav/grav is a Modern, Crazy Fast, Ridiculously Easy and Amazingly Powerful Flat-File CMS. Affected versions of this package are vulnerable to Insufficiently Protected Credentials via the offsetGet process. An attacker can retrieve sensitive user information, such as hashed passwords...

Server-side Request Forgery (SSRF)

Overview nltk is a Natural Language Toolkit NLTK is a Python package for natural language processing. Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the urlopen process in nltk/pathsec.py. An attacker can reach internal-only HTTP resources by supplying a...

Arbitrary Argument Injection

Overview GitPython is a python library used to interact with Git repositories Affected versions of this package are vulnerable to Arbitrary Argument Injection via the Repo.blame and Repo.blameincremental option check in git/repo/base.py. An attacker can read local files by supplying a blame...

External Control of File Name or Path

Overview GitPython is a python library used to interact with Git repositories Affected versions of this package are vulnerable to External Control of File Name or Path via the TagReference.create function in git/refs/tag.py. An attacker can read local files by supplying a positional reference val...

Deserialization of Untrusted Data

Overview nltk is a Natural Language Toolkit NLTK is a Python package for natural language processing. Affected versions of this package are vulnerable to Deserialization of Untrusted Data through the parse method in nltk/parse/transitionparser.py. An attacker can execute arbitrary Python code by...

Insufficiently Protected Credentials

Overview getgrav/grav is a Modern, Crazy Fast, Ridiculously Easy and Amazingly Powerful Flat-File CMS. Affected versions of this package are vulnerable to Insufficiently Protected Credentials via the Twig sandbox configuration, which contains an incomplete default denylist. An attacker can access...

External Control of File Name or Path

Overview GitPython is a python library used to interact with Git repositories Affected versions of this package are vulnerable to External Control of File Name or Path through the Submodule.configparser path in git/objects/submodule/base.py. An attacker can disclose the first line of a readable...

Arbitrary Argument Injection

Overview GitPython is a python library used to interact with Git repositories Affected versions of this package are vulnerable to Arbitrary Argument Injection via the writesection serialization path in git/config.py. An attacker can create a dormant multi-line value in a Git config file and trigg...

Directory Traversal

Overview GitPython is a python library used to interact with Git repositories Affected versions of this package are vulnerable to Directory Traversal through Repo.clone and Repo.clonefrom in git/repo/base.py. An attacker can create a Git repository metadata directory outside the intended clone...

Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')

Overview nltk is a Natural Language Toolkit NLTK is a Python package for natural language processing. Affected versions of this package are vulnerable to Improper Restriction of Recursive Entity References in DTDs 'XML Entity Expansion' via the raw xml.etree.ElementTree parsing in...

Untrusted Search Path

Overview nltk is a Natural Language Toolkit NLTK is a Python package for natural language processing. Affected versions of this package are vulnerable to Untrusted Search Path through the dot2img function in nltk/parse/dependencygraph.py and the AlignedSent.reprsvg method in nltk/translate/api.py...

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read through the AV1 RTP packetizer’s ffrtpsendav1 keyframe sequence-header search loop in libavformat/rtpencav1.c. An attacker can make FFmpeg read past the end of an AV1 packet by supplying a crafted AV1 frame with an...

User Impersonation

Overview Affected versions of this package are vulnerable to User Impersonation in the CookieAuthenticator process when unencrypted, forgeable legacy tokens are used. An attacker can gain unauthorized access or cause CPU or memory exhaustion by crafting and submitting malicious authentication...

Improper Neutralization

Overview Affected versions of this package are vulnerable to Improper Neutralization through the CONNECT and PUBLISH encoding paths in MqttEncoder and MqttCodecUtil. An attacker can send MQTT fields containing NUL bytes or wildcard characters by supplying crafted client identifiers, usernames, wi...

User Impersonation

Overview Affected versions of this package are vulnerable to User Impersonation through the JWTClaimsRegistry in src/joserfc/rfc7519/claims.py. An attacker can make a JWT with an array-typed iss claim pass an exact-issuer check by supplying a list that contains the expected issuer string...

Improper Authentication

Overview filament/filament is an A collection of full-stack components for accelerated Laravel app development. Affected versions of this package are vulnerable to Improper Authentication in the authentication process when recovery codes are enabled. An attacker can gain unauthorized access by...

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion through the InlineParser emphasis processing in src/mistune/inlineparser.py. An attacker can crash the Python process by supplying Markdown with a very long run of emphasis markers, such as hundreds or thousands o...

CRLF Injection

Overview cakephp/cakephp is a rapid development framework for PHP which uses commonly known design patterns like Associative Data Mapping, Front Controller, and MVC. Affected versions of this package are vulnerable to CRLF Injection via the setHeaders or addHeaders functions. An attacker can inje...

SQL Injection

Overview Affected versions of this package are vulnerable to SQL Injection via the jsonValue function when user-controlled data is supplied to the jsonPath parameter with PostgresDriver. An attacker can execute arbitrary SQL commands by injecting malicious input. Remediation Upgrade...

SQL Injection

Overview cakephp/cakephp is a rapid development framework for PHP which uses commonly known design patterns like Associative Data Mapping, Front Controller, and MVC. Affected versions of this package are vulnerable to SQL Injection via the jsonValue function when user-controlled data is supplied ...

Missing Release of Resource after Effective Lifetime

Overview @libp2p/circuit-relay-v2 is an Implementation of Circuit Relay v2 Affected versions of this package are vulnerable to Missing Release of Resource after Effective Lifetime through the reserve path in packages/transport-circuit-relay-v2/src/server/reservation-store.ts. An attacker can grow...

Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

Overview github.com/gorilla/websocket is a Go implementation of the WebSocket protocol. Affected versions of this package are vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator PRNG via the newMaskKey function in conn.go. An attacker can predict or recover WebSocket frame...

Remote Code Execution (RCE)

Overview vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. Affected versions of this package are vulnerable to Remote Code Execution RCE in its external module loader, lib/resolver-compat.js makeResolverFromLegacyOptions, CustomResolver.isPathAllowed, and...

Remote Code Execution (RCE)

Overview org.webjars.npm:vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. Affected versions of this package are vulnerable to Remote Code Execution RCE in its external module loader, lib/resolver-compat.js makeResolverFromLegacyOptions,...

External Control of Assumed-Immutable Web Parameter

Overview Affected versions of this package are vulnerable to External Control of Assumed-Immutable Web Parameter through WebsocketConstants and the AtmosphereWebsocketEndpointBuilderFactory/WebsocketProducer dispatch headers in the atmosphere-websocket producer. An attacker can redirect or suppre...