advisory-database icon indicating copy to clipboard operation
advisory-database copied to clipboard
verified publisher icon github

[GHSA-fj2j-8cg9-vrj8] The rebar3 tool 3.0.0-beta.3 through 3.13.2 for Erlang...

Open p-w opened this issue 3 years ago • 2 comments

Updates

  • Affected products
  • References
  • Source code location
  • Summary

p-w avatar Jul 18 '22 11:07 p-w

Hi @p-w I'm curious how you arrived at this package name and ecosystem tuple for two reasons

  1. no such package exists on packagist https://packagist.org/search/?q=rebar3&reason=vendor_not_found
  2. I'm pretty sure this advisory is referring to the erlang build tool which is also not distributed via hex.pm https://hex.pm/packages/rebar3

darakian avatar Jul 18 '22 20:07 darakian

👋 This pull request has been marked as stale because it has been open with no activity. You can: comment on the issue or remove the stale label to hold stale off for a while, add the Keep label to hold stale off permanently, or do nothing. If you do nothing this pull request will be closed eventually by the stale bot. Please see CONTRIBUTING.md for more policy details.

taladrane avatar Aug 12 '22 00:08 taladrane