Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-28102 State: PUBLISHED Published: 2024-03-06T21:09:58.064Z Last Updated: 2024-09-09T13:06:44.240Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H) Vendors: latchset Products: jwcrypto Problem Types: CWE-770 Description: JWCrypto implements JWK, JWS, and JWE specifications using python-cryptography. Prior to version 1.5.6, an attacker can cause a denial of service attack by passing in a malicious JWE Token with a high compression ratio. When the server processes this token, it will consume a lot of memory and processing time. Version 1.5.6 fixes this vulnerability by limiting the maximum token length. Additional Analyst Notes: - CVE Program Container:
1.5.6 fixes this vulnerability by limiting the maximum token length. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/latchset/jwcrypto/security/advisories/GHSA-j857-7rvv-vj97 - https://github.com/latchset/jwcrypto/commit/90477a3b6e73da69740e00b8161f53fea19b831f
CVE ID: CVE-2024-28103 State: PUBLISHED Published: 2024-06-04T19:47:44.199Z Last Updated: 2024-12-06T13:09:28.269Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N) Vendors: rails Products: rails Problem Types: CWE-20 Description: Action Pack is a framework for handling and responding to web requests. Since 6.1.0, the application configurable Permissions-Policy is only served on responses with an HTML related Content-Type. This vulnerability is fixed in 6.1.7.8, 7.0.8.2, and 7.1.3.3. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/rails/rails/security/advisories/GHSA-fwhr-88qx-h9g7 - https://github.com/rails/
tainer: References: - https://github.com/rails/rails/security/advisories/GHSA-fwhr-88qx-h9g7 - https://github.com/rails/rails/commit/35858f1d9d57f6c4050a8d9ab754bd5d088b4523
CVE ID: CVE-2024-28105 State: PUBLISHED Published: 2024-03-25T18:35:05.202Z Last Updated: 2024-08-13T14:20:12.592Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: thorsten Products: phpMyFAQ Problem Types: CWE-434 Description: phpMyFAQ is an open source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases. The category image upload function in phpmyfaq is vulnerable to manipulation of the `Content-type` and `lang` parameters, allowing attackers to upload malicious files with a .php extension, potentially leading to remote code execution (RCE) on the system. This vulnerability is fixed in 3.2.6. Additional Analyst Notes: - CVE Program Cont
e code execution (RCE) on the system. This vulnerability is fixed in 3.2.6. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-pwh2-fpfr-x5gf - https://github.com/thorsten/phpMyFAQ/commit/9136883776af67dfdb0e8cf14f5e0ca22bf4f2e7
CVE ID: CVE-2024-28106 State: PUBLISHED Published: 2024-03-25T18:41:58.260Z Last Updated: 2024-08-02T00:48:49.468Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L) Vendors: thorsten Products: phpMyFAQ Problem Types: CWE-79 Description: phpMyFAQ is an open source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases. By manipulating the news parameter in a POST request, an attacker can inject malicious JavaScript code. Upon browsing to the compromised news page, the XSS payload triggers. This vulnerability is fixed in 3.2.6. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/thorsten/phpMyFA
ional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-6p68-36m6-392r - https://github.com/thorsten/phpMyFAQ/commit/c94b3deadd87789389e1fad162bc3dd595c0e15a
CVE ID: CVE-2024-28107 State: PUBLISHED Published: 2024-03-25T18:47:12.328Z Last Updated: 2025-04-10T18:30:21.506Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: thorsten Products: phpMyFAQ Problem Types: CWE-89 Description: phpMyFAQ is an open source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases. A SQL injection vulnerability has been discovered in the `insertentry` & `saveentry` when modifying records due to improper escaping of the email address. This allows any authenticated user with the rights to add/edit FAQ news to exploit this vulnerability to exfiltrate data, take over accounts and in some cases, even achieve RCE. This v
AQ news to exploit this vulnerability to exfiltrate data, take over accounts and in some cases, even achieve RCE. This vulnerability is fixed in 3.2.6. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-2grw-mc9r-822r - https://github.com/thorsten/phpMyFAQ/commit/d0fae62a72615d809e6710861c1a7f67ac893007
CVE ID: CVE-2024-28108 State: PUBLISHED Published: 2024-03-25T18:52:19.325Z Last Updated: 2024-08-02T00:48:48.813Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: thorsten Products: phpMyFAQ Problem Types: CWE-79, CWE-80 Description: phpMyFAQ is an open source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases. Due to insufficient validation on the `contentLink` parameter, it is possible for unauthenticated users to inject HTML code to the page which might affect other users. _Also, requires that adding new FAQs is allowed for guests and that the admin doesn't check the content of a newly added FAQ._ This vulnerability is fixed in 3.2
llowed for guests and that the admin doesn't check the content of a newly added FAQ._ This vulnerability is fixed in 3.2.6. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-48vw-jpf8-hwqh - https://github.com/thorsten/phpMyFAQ/commit/4fed1d9602f0635260f789fe85995789d94d6634
CVE ID: CVE-2024-28109 State: PUBLISHED Published: 2024-03-28T13:19:39.906Z Last Updated: 2024-08-02T00:48:48.254Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: veraPDF Products: veraPDF-library Problem Types: CWE-91 Description: veraPDF-library is a PDF/A validation library. Executing policy checks using custom schematron files invokes an XSL transformation that could lead to a remote code execution (RCE) vulnerability. This vulnerability is fixed in 1.24.2. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/veraPDF/veraPDF-library/security/advisories/GHSA-qxqf-2mfx-x8jw - https://github.com/veraPDF/
nces: - https://github.com/veraPDF/veraPDF-library/security/advisories/GHSA-qxqf-2mfx-x8jw - https://github.com/veraPDF/veraPDF-library/issues/1415 - https://github.com/veraPDF/veraPDF-library/commit/614ffa477a2cf0819e4b0df1ab133610e0da25fb - https://github.com/veraPDF/veraPDF-library/commit/9386ecbe1a1d1fb9e886d19df28851ed07890d9f - https://github.com/veraPDF/veraPDF-library/commit/d5314cbdf4e058e0716f80dbdad2dbd8d96e6bfe
CVE ID: CVE-2024-28110 State: PUBLISHED Published: 2024-03-06T21:12:26.991Z Last Updated: 2025-04-16T15:54:15.341Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: cloudevents Products: sdk-go Problem Types: CWE-522 Description: Go SDK for CloudEvents is the official CloudEvents SDK to integrate applications with CloudEvents. Prior to version 2.15.2, using cloudevents.WithRoundTripper to create a cloudevents.Client with an authenticated http.RoundTripper causes the go-sdk to leak credentials to arbitrary endpoints. When the transport is populated with an authenticated transport, then http.DefaultClient is modified with the authenticated transport and will start
ted with an authenticated transport, then http.DefaultClient is modified with the authenticated transport and will start to send Authorization tokens to any endpoint it is used to contact. Version 2.15.2 patches this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/cloudevents/sdk-go/security/advisories/GHSA-5pf6-2qwx-pxm2 - https://github.com/cloudevents/sdk-go/commit/de2f28370b0d2a0f64f92c0c6139fa4b8a7c3851 - https://github.com/cloudevents/sdk-go/blob/67e389964131d55d65cd14b4eb32d57a47312695/v2/protocol/http/protocol.go#L104-L110
CVE ID: CVE-2024-28111 State: PUBLISHED Published: 2024-03-06T21:15:02.404Z Last Updated: 2024-08-02T00:48:49.290Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: thinkst Products: canarytokens Problem Types: CWE-1236 Description: Canarytokens helps track activity and actions on a network. Canarytokens.org supports exporting the history of a Canarytoken's incidents in CSV format. The generation of these CSV files is vulnerable to a CSV Injection vulnerability. This flaw can be used by an attacker who discovers an HTTP-based Canarytoken to target the Canarytoken's owner, if the owner exports the incident history to CSV and opens in a reader application such a
arget the Canarytoken's owner, if the owner exports the incident history to CSV and opens in a reader application such as Microsoft Excel. The impact is that this issue could lead to code execution on the machine on which the CSV file is opened. Version sha-c595a1f8 contains a fix for this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/thinkst/canarytokens/security/advisories/GHSA-fqh6-v4qp-65fv - https://github.com/thinkst/canarytokens/commit/c595a1f884b986da2ca05aa5bff9ae5f93c6a4aa
CVE ID: CVE-2024-28112 State: PUBLISHED Published: 2024-03-12T19:54:16.219Z Last Updated: 2024-08-26T14:03:19.025Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N) Vendors: peering-manager Products: peering-manager Problem Types: CWE-79 Description: Peering Manager is a BGP session management tool. Affected versions of Peering Manager are subject to a potential stored Cross-Site Scripting (XSS) attack in the `name` attribute of AS or Platform. The XSS triggers on a routers detail page. Adversaries are able to execute arbitrary JavaScript code with the permission of a victim. XSS attacks are often used to steal credentials or login tokens of other users. This issue has
e permission of a victim. XSS attacks are often used to steal credentials or login tokens of other users. This issue has been addressed in version 1.8.3. Users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/peering-manager/peering-manager/security/advisories/GHSA-fmf5-24pq-rq2w - https://owasp.org/www-community/attacks/xss
CVE ID: CVE-2024-28113 State: PUBLISHED Published: 2024-03-12T19:56:01.358Z Last Updated: 2024-08-02T00:48:49.208Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N) Vendors: peering-manager Products: peering-manager Problem Types: CWE-601 Description: Peering Manager is a BGP session management tool. In Peering Manager <=1.8.2, it is possible to redirect users to an arbitrary page using a crafted url. As a result users can be redirected to an unexpected location. This issue has been addressed in version 1.8.3. Users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: Ref
nown workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/peering-manager/peering-manager/security/advisories/GHSA-f4mf-5g28-q7f5 - https://github.com/peering-manager/peering-manager/commit/49dc5593184d7740d81e57dbbe3f971d2969dfac
CVE ID: CVE-2024-28114 State: PUBLISHED Published: 2024-03-12T19:58:39.859Z Last Updated: 2024-08-28T16:23:15.497Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:N) Vendors: peering-manager Products: peering-manager Problem Types: CWE-74 Description: Peering Manager is a BGP session management tool. There is a Server Side Template Injection vulnerability that leads to Remote Code Execution in Peering Manager <=1.8.2. As a result arbitrary commands can be executed on the operating system that is running Peering Manager. This issue has been addressed in version 1.8.3. Users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst No
ersion 1.8.3. Users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/peering-manager/peering-manager/security/advisories/GHSA-q37x-qfrx-jcv6 - https://github.com/peering-manager/peering-manager/commit/8a865fb596c11ad7caf45aef317d8fcbce7f85ff - https://owasp.org/www-community/attacks/Command_Injection - https://owasp.org/www-project-web-security-testing-guide/v41/4-Web_Application_Security_Testing/07-Input_Validation_Testing/18-Testing_for_Server_Side_Template_Injection - https://stackoverflow.com/questions/73939573/how-to-sanitise-string-of-python-code-wi
r_Server_Side_Template_Injection - https://stackoverflow.com/questions/73939573/how-to-sanitise-string-of-python-code-with-python
CVE ID: CVE-2024-28115 State: PUBLISHED Published: 2024-03-07T20:54:00.743Z Last Updated: 2024-08-28T17:42:09.830Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: FreeRTOS Products: FreeRTOS-Kernel Problem Types: CWE-284 Description: FreeRTOS is a real-time operating system for microcontrollers. FreeRTOS Kernel versions through 10.6.1 do not sufficiently protect against local privilege escalation via Return Oriented Programming techniques should a vulnerability exist that allows code injection and execution. These issues affect ARMv7-M MPU ports, and ARMv8-M ports with Memory Protected Unit (MPU) support enabled (i.e. `configENABLE_MPU` set to 1). These issues
rts, and ARMv8-M ports with Memory Protected Unit (MPU) support enabled (i.e. `configENABLE_MPU` set to 1). These issues are fixed in version 10.6.2 with a new MPU wrapper. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/FreeRTOS/FreeRTOS-Kernel/security/advisories/GHSA-xcv7-v92w-gq6r - https://github.com/FreeRTOS/FreeRTOS-Kernel/releases/tag/V10.6.2
CVE ID: CVE-2024-28116 State: PUBLISHED Published: 2024-03-21T21:44:29.489Z Last Updated: 2024-08-02T00:48:49.256Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: getgrav Products: grav Problem Types: CWE-94, CWE-1336 Description: Grav is an open-source, flat-file content management system. Grav CMS prior to version 1.7.45 is vulnerable to a Server-Side Template Injection (SSTI), which allows any authenticated user (editor permissions are sufficient) to execute arbitrary code on the remote server bypassing the existing security sandbox. Version 1.7.45 contains a patch for this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: R
on 1.7.45 contains a patch for this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/getgrav/grav/security/advisories/GHSA-c9gp-64c4-2rrh - https://github.com/getgrav/grav/commit/4149c81339274130742831422de2685f298f3a6e
CVE ID: CVE-2024-28117 State: PUBLISHED Published: 2024-03-21T21:50:47.203Z Last Updated: 2024-08-13T16:56:12.392Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: getgrav Products: grav Problem Types: CWE-94 Description: Grav is an open-source, flat-file content management system. Prior to version 1.7.45, Grav validates accessible functions through the Utils::isDangerousFunction function, but does not impose restrictions on twig functions like twig_array_map, allowing attackers to bypass the validation and execute arbitrary commands. Twig processing of static pages can be enabled in the front matter by any administrative user allowed to create or edit pages. A
cessing of static pages can be enabled in the front matter by any administrative user allowed to create or edit pages. As the Twig processor runs unsandboxed, this behavior can be used to gain arbitrary code execution and elevate privileges on the instance. Upgrading to patched version 1.7.45 can mitigate this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/getgrav/grav/security/advisories/GHSA-qfv4-q44r-g7rv - https://github.com/getgrav/grav/commit/de1ccfa12dbcbf526104d68c1a6bc202a98698fe
CVE ID: CVE-2024-28118 State: PUBLISHED Published: 2024-03-21T21:55:11.788Z Last Updated: 2024-08-02T00:48:49.053Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: getgrav Products: grav Problem Types: CWE-94 Description: Grav is an open-source, flat-file content management system. Prior to version 1.7.45, due to the unrestricted access to twig extension class from Grav context, an attacker can redefine config variable. As a result, attacker can bypass a previous SSTI mitigation. Twig processing of static pages can be enabled in the front matter by any administrative user allowed to create or edit pages. As the Twig processor runs unsandboxed, this behavior can
er by any administrative user allowed to create or edit pages. As the Twig processor runs unsandboxed, this behavior can be used to gain arbitrary code execution and elevate privileges on the instance. Version 1.7.45 contains a fix for this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/getgrav/grav/security/advisories/GHSA-r6vw-8v8r-pmp4 - https://github.com/getgrav/grav/commit/de1ccfa12dbcbf526104d68c1a6bc202a98698fe
CVE ID: CVE-2024-28119 State: PUBLISHED Published: 2024-03-21T22:02:04.145Z Last Updated: 2024-08-21T22:55:01.977Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: getgrav Products: grav Problem Types: CWE-94 Description: Grav is an open-source, flat-file content management system. Prior to version 1.7.45, due to the unrestricted access to twig extension class from grav context, an attacker can redefine the escape function and execute arbitrary commands. Twig processing of static pages can be enabled in the front matter by any administrative user allowed to create or edit pages. As the Twig processor runs unsandboxed, this behavior can be used to gain arbitrary
ser allowed to create or edit pages. As the Twig processor runs unsandboxed, this behavior can be used to gain arbitrary code execution and elevate privileges on the instance. Version 1.7.45 contains a patch for this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/getgrav/grav/security/advisories/GHSA-2m7x-c7px-hp58 - https://github.com/getgrav/grav/commit/de1ccfa12dbcbf526104d68c1a6bc202a98698fe - https://github.com/twigphp/Twig/blob/3.x/src/Extension/EscaperExtension.php#L99
CVE ID: CVE-2024-28120 State: PUBLISHED Published: 2024-03-11T21:14:22.675Z Last Updated: 2024-08-02T00:48:49.158Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N) Vendors: Exafunction Products: codeium-chrome Problem Types: CWE-284, CWE-200 Description: codeium-chrome is an open source code completion plugin for the chrome web browser. The service worker of the codeium-chrome extension doesn't check the sender when receiving an external message. This allows an attacker to host a website that will steal the user's Codeium api-key, and thus impersonate the user on the backend autocomplete server. This issue has not been addressed. Users are advised to monitor the usage
e the user on the backend autocomplete server. This issue has not been addressed. Users are advised to monitor the usage of their API key. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/Exafunction/codeium-chrome/security/advisories/GHSA-8c7j-2h97-q63p - https://securitylab.github.com/advisories/GHSL-2024-027_GHSL-2024-028_codeium-chrome
CVE ID: CVE-2024-28121 State: PUBLISHED Published: 2024-03-12T19:44:29.591Z Last Updated: 2025-02-13T17:47:15.887Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: stimulusreflex Products: stimulus_reflex Problem Types: CWE-470 Description: stimulus_reflex is a system to extend the capabilities of both Rails and Stimulus by intercepting user interactions and passing them to Rails over real-time websockets. In affected versions more methods than expected can be called on reflex instances. Being able to call some of them has security implications. To invoke a reflex a websocket message of the following shape is sent: `\"target\":\"[class_name]#[method_name]\",\"a
s. To invoke a reflex a websocket message of the following shape is sent: `\"target\":\"[class_name]#[method_name]\",\"args\":[]`. The server will proceed to instantiate `reflex` using the provided `class_name` as long as it extends `StimulusReflex::Reflex`. It then attempts to call `method_name` on the instance with the provided arguments. This is problematic as `reflex.method method_name` can be more methods that those explicitly specified by the developer in their reflex class. A good example is the instance_variable_set method. This vulnerability has been patched in versions 3.4.2 and 3.5.0.rc4. Users unable to upgrade should: see the backing GHSA advisory for mitigation advice. Addition
sions 3.4.2 and 3.5.0.rc4. Users unable to upgrade should: see the backing GHSA advisory for mitigation advice. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/stimulusreflex/stimulus_reflex/security/advisories/GHSA-f78j-4w3g-4q65 - https://github.com/stimulusreflex/stimulus_reflex/commit/538582d240439aab76066c72335ea92096cd0c7f - https://github.com/stimulusreflex/stimulus_reflex/blob/0211cad7d60fe96838587f159d657e44cee51b9b/app/channels/stimulus_reflex/channel.rb#L83 - https://github.com/stimulusreflex/stimulus_reflex/releases/tag/v3.4.2 - https://github.com/stimulusreflex/stimulus_reflex/releases/tag/v3.5.0.rc4 - http://seclists.
eflex/releases/tag/v3.4.2 - https://github.com/stimulusreflex/stimulus_reflex/releases/tag/v3.5.0.rc4 - http://seclists.org/fulldisclosure/2024/Mar/16
CVE ID: CVE-2024-28122 State: PUBLISHED Published: 2024-03-09T00:45:50.129Z Last Updated: 2025-04-16T15:49:42.161Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H) Vendors: lestrrat-go Products: jwx Problem Types: CWE-400 Description: JWX is Go module implementing various JWx (JWA/JWE/JWK/JWS/JWT, otherwise known as JOSE) technologies. This vulnerability allows an attacker with a trusted public key to cause a Denial-of-Service (DoS) condition by crafting a malicious JSON Web Encryption (JWE) token with an exceptionally high compression ratio. This issue has been patched in versions 1.2.29 and 2.0.21. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Con
sue has been patched in versions 1.2.29 and 2.0.21. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/lestrrat-go/jwx/security/advisories/GHSA-hj3v-m684-v259 - https://github.com/lestrrat-go/jwx/releases/tag/v1.2.29 - https://github.com/lestrrat-go/jwx/releases/tag/v2.0.21
CVE ID: CVE-2024-28123 State: PUBLISHED Published: 2024-03-08T21:29:53.555Z Last Updated: 2024-08-05T18:14:48.975Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: wasmi-labs Products: wasmi Problem Types: CWE-787 Description: Wasmi is an efficient and lightweight WebAssembly interpreter with a focus on constrained and embedded systems. In the WASMI Interpreter, an Out-of-bounds Buffer Write will arise if the host calls or resumes a Wasm function with more parameters than the default limit (128), as it will surpass the stack value. This doesn’t affect calls from Wasm to Wasm, only from host to Wasm. This vulnerability was patched in version 0.31.1. Additional A