FuzzManager
FuzzManager copied to clipboard
A fuzzing management tools collection
Bumps [terser](https://github.com/terser/terser) from 5.7.0 to 5.14.2. Changelog Sourced from terser's changelog. v5.14.2 Security fix for RegExps that should not be evaluated (regexp DDOS) Source maps improvements (#1211) Performance improvements in...
The non-docker setup instructions included in the [README](https://github.com/MozillaSecurity/FuzzManager/blob/04957b8cbc788b1e0a344ec6af8498325aeadb27/README.md) do not mention the required steps necessary for building the new JS frontend. At a minimum, it should be: ``` cd server/frontend...
A query like this on the CrashManager signatures view shows all buckets that haven't received a crash in the past 6 months: ``` { "op": "AND", "permanent": false, "_": {...
Bumps [pyjwt](https://github.com/jpadilla/pyjwt) from 2.3.0 to 2.4.0. Release notes Sourced from pyjwt's releases. 2.4.0 Security [CVE-2022-29217] Prevent key confusion through non-blocklisted public key formats. https://github.com/jpadilla/pyjwt/security/advisories/GHSA-ffqj-6fqr-9h24 What's Changed Add support for Python...
This PR lays the groundwork for mypy support in FuzzManager. - In the `misc/` folder, I had to rename `afl-libfuzzer` to `afl_libfuzzer` as mypy does not like dashes - I...
Bumps [django](https://github.com/django/django) from 2.2.27 to 2.2.28. Commits 5c33000 [2.2.x] Bumped version for 2.2.28 release. 29a6c98 [2.2.x] Fixed CVE-2022-28347 -- Protected QuerySet.explain(**options) against... 2c09e68 [2.2.x] Fixed CVE-2022-28346 -- Protected QuerySet.annotate(), aggregate(),...
Bumps [minimist](https://github.com/substack/minimist) from 1.2.5 to 1.2.6. Commits 7efb22a 1.2.6 ef88b93 security notice for additional prototype pollution issue c2b9819 isConstructorOrProto adapted from PR bc8ecee test from prototype pollution PR See full...
Bumps [celery](https://github.com/celery/celery) from 4.4.7 to 5.2.2. Release notes Sourced from celery's releases. 5.2.2 Release date: 2021-12-26 16:30 P.M UTC+2:00 Release by: Omer Katz Various documentation fixes. Fix CVE-2021-23727 (Stored Command...
Creating a bucket from a "No crash detected" CrashEntry results in a 500 server error. ``` Traceback (most recent call last): File "/srv/venv/lib/python3.8/site-packages/django/core/handlers/base.py", line 113, in _get_response response = wrapped_callback(request,...