advisory-database

advisory-database copied to clipboard

[GHSA-67hx-6x53-jw92] Babel vulnerable to arbitrary code execution when compiling specifically crafted malicious code

3

SAEED2ALAHMARI

[GHSA-7g45-4rm6-3mm3] Guava vulnerable to insecure use of temporary directory

4

**Updates** - Affected products **Comments** guava produces 2 versions of jars, one for mobile env with android suffix and jre for java outside the mobile Android envs.

mareknovotny

[GHSA-pg6w-hq9f-wfwr] resumable.php (aka PHP backend for resumable.js) 0.1.4...

12

**Updates** - Affected products - CWEs - Description - Severity - Source code location - Summary **Comments** I am the CVE reporter

williamdes

[GHSA-vj2m-9f5j-mpr5] Vapor vulnerable to denial of service in HTTP Range Request of FileMiddleware

3

**Updates** - CVSS **Comments** Better pertected

Zepnhouse

[GHSA-8h5w-f6q9-wg35]: remove vulnerability since it is rejected

4

A fix version is available for langchain and the vuln CVE-2023-32785. With this PR I modify the range, making known the version no longer affected.

dippie8

[GHSA-ffvq-7w96-97p7] Denial of Service in Spring Framework

4

**Updates** - References - Source code location **Comments** Add source code location and patch links related to CVE-2018-15756.

sunSUNQ

[GHSA-hhpm-5cp2-hg4x] Deserialization of Untrusted Data in Jenkins

4

**Updates** - Affected products - References - Source code location **Comments** Add some patch links related to CVE-2018-1000861.

sunSUNQ

[GHSA-g343-63vq-2wq6] An issue in Postman version 10.22 and before on macOS...

1

**Updates** - Affected products - Description - References - Summary **Comments** Mitre also has disputed this CVE as we believe this was not submitted in good faith and is inaccurate....

harshit-kochar

List Perl as an environment

9

I'd like to improve several reports related to the Perl language and ecosystem, I cannot submit the form because the improvement form has the ecosystem as a required field, and...

briandfoy

GHSA-cqhr-jqvc-qw9p has an invalid CVE id and appears to be a duplicate of GHSA-g66q-grxc-64j3

1

GHSA-cqhr-jqvc-qw9p has the CVE id CVE-2016-1000273 but this id does not exist at NVD. On the other hand, the vulnerability appears to be the same as GHSA-g66q-grxc-64j3 although the severity...

warkentyne