Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-7687 State: PUBLISHED Published: 2020-07-25T08:40:16.391467Z Last Updated: 2024-09-17T02:46:44.159Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P) Vendors: n/a Products: fast-http Problem Types: Directory Traversal Description: This affects all versions of package fast-http. There is no path sanitization in the path provided at fs.readFile in index.js. Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/vuln/SNYK-JS-FASTHTTP-572892
CVE ID: CVE-2020-7688 State: PUBLISHED Published: 2020-07-01T16:15:15.509975Z Last Updated: 2024-09-16T22:40:15.601Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:R) Vendors: n/a Products: mversion Problem Types: Command Injection Description: The issue occurs because tagName user input is formatted inside the exec function is executed without any checks. Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/vuln/SNYK-JS-MVERSION-573174 - https://github.com/mikaelbr/mversion/commit/b7a8b32600e60759a7ad3921ec4a2750bf173482 - https://github.com/418sec/huntr/pull/102
CVE ID: CVE-2020-7689 State: PUBLISHED Published: 2020-07-01T13:55:14.313107Z Last Updated: 2024-09-17T01:22:03.558Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: n/a Products: bcrypt Problem Types: Insecure Encryption Description: Data is truncated wrong when its length is greater than 255 bytes. Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/vuln/SNYK-JS-BCRYPT-572911 - https://github.com/kelektiv/node.bcrypt.js/issues/776 - https://github.com/kelektiv/node.bcrypt.js/pull/806 - https://github.com/kelektiv/node.bcrypt.js/pull/807
CVE ID: CVE-2020-7690 State: PUBLISHED Published: 2020-07-06T12:25:21 Last Updated: 2024-08-04T09:41:01.475Z Vendors: n/a Products: jspdf Problem Types: CWE-79 Description: All affected versions <2.0.0 of package jspdf are vulnerable to Cross-site Scripting (XSS). It is possible to inject JavaScript code via the html method. Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/vuln/SNYK-JS-JSPDF-575256 - https://github.com/MrRio/jsPDF/issues/2795
CVE ID: CVE-2020-7691 State: PUBLISHED Published: 2020-07-06T12:25:16.033693Z Last Updated: 2024-09-16T23:55:33.267Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C) Vendors: n/a Products: jspdf Problem Types: Cross-site Scripting (XSS) Description: In all versions of the package jspdf, it is possible to use <<script>script> in order to go over the filtering regex. Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/vuln/SNYK-JS-JSPDF-568273 - https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARS-575255 - https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBMRRIO-575254 - https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-575253 - https://sny
o/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBMRRIO-575254 - https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-575253 - https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-575252
CVE ID: CVE-2020-7692 State: PUBLISHED Published: 2020-07-09T13:20:16.446467Z Last Updated: 2024-09-17T03:47:55.563Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: n/a Products: com.google.oauth-client:google-oauth-client Problem Types: Improper Authorization Description: PKCE support is not implemented in accordance with the RFC for OAuth 2.0 for Native Apps. Without the use of PKCE, the authorization code returned by an authorization server is not enough to guarantee that the client that issued the initial authorization request is the one that will be authorized. An attacker is able to obtain the authorization code using a malicious app on the client-side a
that will be authorized. An attacker is able to obtain the authorization code using a malicious app on the client-side and use it to gain authorization to the protected resource. This affects the package com.google.oauth-client:google-oauth-client before 1.31.0. Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/vuln/SNYK-JAVA-COMGOOGLEOAUTHCLIENT-575276 - https://github.com/googleapis/google-oauth-java-client/issues/469 - https://github.com/googleapis/google-oauth-java-client/commit/13433cd7dd06267fc261f0b1d4764f8e3432c824 - https://tools.ietf.org/html/rfc8252%23section-8.1 - https://tools.ietf.org/html/rfc7636%23section-1 - https://lists.apache.org/thread.html
.org/html/rfc8252%23section-8.1 - https://tools.ietf.org/html/rfc7636%23section-1 - https://lists.apache.org/thread.html/r3db6ac73e0558d64f0b664f2fa4ef0a865e57c5de20f8321d3b48678%40%3Ccommits.druid.apache.org%3E - https://lists.apache.org/thread.html/reae8909b264d1103f321b9ce1623c10c1ddc77dba9790247f2c0c90f%40%3Ccommits.druid.apache.org%3E
CVE ID: CVE-2020-7693 State: PUBLISHED Published: 2020-07-09T13:20:24.056167Z Last Updated: 2024-09-17T00:16:52.624Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O) Vendors: n/a Products: sockjs Problem Types: Denial of Service (DoS) Description: Incorrect handling of Upgrade header with the value websocket leads in crashing of containers hosting sockjs apps. This affects the package sockjs before 0.3.20. Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/vuln/SNYK-JS-SOCKJS-575261 - https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-575448 - https://github.com/sockjs/sockjs-node/issues/252 - https://github.com/sockjs/sockjs-node/pull
AVA-ORGWEBJARSNPM-575448 - https://github.com/sockjs/sockjs-node/issues/252 - https://github.com/sockjs/sockjs-node/pull/265 - https://github.com/andsnw/sockjs-dos-py - https://github.com/sockjs/sockjs-node/commit/dd7e642cd69ee74385825816d30642c43e051d16
CVE ID: CVE-2020-7694 State: PUBLISHED Published: 2020-07-27T11:25:12.371781Z Last Updated: 2024-09-17T00:30:44.758Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:U/RC:C) Vendors: n/a Products: uvicorn Problem Types: Log Injection Description: This affects all versions of package uvicorn. The request logger provided by the package is vulnerable to ASNI escape sequence injection. Whenever any HTTP request is received, the default behaviour of uvicorn is to log its details to either the console or a log file. When attackers request crafted URLs with percent-encoded escape sequences, the logging component will log the URL after it's been processed with urllib.parse
ith percent-encoded escape sequences, the logging component will log the URL after it's been processed with urllib.parse.unquote, therefore converting any percent-encoded characters into their single-character equivalent, which can have special meaning in terminal emulators. By requesting URLs with crafted paths, attackers can: * Pollute uvicorn's access logs, therefore jeopardising the integrity of such files. * Use ANSI sequence codes to attempt to interact with the terminal emulator that's displaying the logs (either in real time or from a file). Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/vuln/SNYK-PYTHON-UVICORN-575560 - https://github.com/encode/uvi
: - CVE Program Container: References: - https://snyk.io/vuln/SNYK-PYTHON-UVICORN-575560 - https://github.com/encode/uvicorn
CVE ID: CVE-2020-7695 State: PUBLISHED Published: 2020-07-27T11:25:16.789872Z Last Updated: 2024-09-17T00:06:47.000Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:P/RL:U/RC:C) Vendors: n/a Products: uvicorn Problem Types: HTTP Response Splitting Description: Uvicorn before 0.11.7 is vulnerable to HTTP response splitting. CRLF sequences are not escaped in the value of HTTP headers. Attackers can exploit this to add arbitrary headers to HTTP responses, or even return an arbitrary response body, whenever crafted input is used to construct HTTP headers. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/encode/uvicorn - https://snyk.io
rs. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/encode/uvicorn - https://snyk.io/vuln/SNYK-PYTHON-UVICORN-570471
CVE ID: CVE-2020-7696 State: PUBLISHED Published: 2020-07-17T09:25:15.060866Z Last Updated: 2024-09-16T18:29:42.271Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: n/a Products: react-native-fast-image Problem Types: Information Exposure Description: This affects all versions of package react-native-fast-image. When an image with source={{uri: "...", headers: { host: "somehost.com", authorization: "..." }} is loaded, all other subsequent images will use the same headers, this can lead to signing credentials or other session tokens being leaked to other servers. Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/vuln/SNYK-JS-REA
aked to other servers. Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/vuln/SNYK-JS-REACTNATIVEFASTIMAGE-572228 - https://github.com/DylanVann/react-native-fast-image/issues/690 - https://github.com/DylanVann/react-native-fast-image/pull/691
CVE ID: CVE-2020-7697 State: PUBLISHED Published: 2020-07-29T12:40:18.271071Z Last Updated: 2024-09-17T02:00:34.690Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:U/RC:C) Vendors: n/a Products: mock2easy Problem Types: Command Injection Description: This affects all versions of package mock2easy. a malicious user could inject commands through the _data variable: Affected Area require('../server/getJsonByCurl')(mock2easy, function (error, stdout) { if (error) { return res.json(500, error); } res.json(JSON.parse(stdout)); }, '', _data.interfaceUrl, query, _data.cookie,_data.interfaceType); Additional Analyst Notes: - CVE Program Container: References: - https
aceUrl, query, _data.cookie,_data.interfaceType); Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/vuln/SNYK-JS-MOCK2EASY-572312 - https://www.npmjs.com/package/mock2easy
CVE ID: CVE-2020-7698 State: PUBLISHED Published: 2020-07-29T12:40:12.518036Z Last Updated: 2024-09-17T00:11:35.120Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: n/a Products: Gerapy Problem Types: Command Injection Description: This affects the package Gerapy from 0 and before 0.9.3. The input being passed to Popen, via the project_configure endpoint, isn’t being sanitized. Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/vuln/SNYK-PYTHON-GERAPY-572470 - https://github.com/Gerapy/Gerapy/commit/e8446605eb2424717418eae199ec7aad573da2d2
CVE ID: CVE-2020-7699 State: PUBLISHED Published: 2020-07-30T09:05:14.105753Z Last Updated: 2024-09-17T03:03:39.320Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: n/a Products: express-fileupload Problem Types: Prototype Pollution Description: This affects the package express-fileupload before 1.1.8. If the parseNested option is enabled, sending a corrupt HTTP request can lead to denial of service or arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/vuln/SNYK-JS-EXPRESSFILEUPLOAD-595969 - https://github.com/richardgirges/express-fileupload/issues/236 - https://security.netapp.com/advisory/ntap-20200821
69 - https://github.com/richardgirges/express-fileupload/issues/236 - https://security.netapp.com/advisory/ntap-20200821-0003/
CVE ID: CVE-2020-7700 State: PUBLISHED Published: 2020-08-14T15:05:12.961314Z Last Updated: 2024-09-16T18:33:50.643Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: n/a Products: phpjs Problem Types: Prototype Pollution Description: All versions of phpjs are vulnerable to Prototype Pollution via parse_str. Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/vuln/SNYK-JS-PHPJS-598681
CVE ID: CVE-2020-7701 State: PUBLISHED Published: 2020-08-14T15:10:12.390994Z Last Updated: 2024-09-17T01:30:37.949Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: n/a Products: madlib-object-utils Problem Types: Prototype Pollution Description: madlib-object-utils before 0.1.7 is vulnerable to Prototype Pollution via setValue. Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/vuln/SNYK-JS-MADLIBOBJECTUTILS-598676
CVE ID: CVE-2020-7702 State: PUBLISHED Published: 2020-08-17T13:50:11.204285Z Last Updated: 2024-09-16T20:46:36.874Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C) Vendors: n/a Products: Templ8 Problem Types: Prototype Pollution Description: All versions of package templ8 are vulnerable to Prototype Pollution via the parse function. Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/vuln/SNYK-JS-TEMPL8-598770
CVE ID: CVE-2020-7703 State: PUBLISHED Published: 2020-08-17T14:50:11.753492Z Last Updated: 2024-09-16T22:45:36.269Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C) Vendors: n/a Products: nis-utils Problem Types: Prototype Pollution Description: All versions of package nis-utils are vulnerable to Prototype Pollution via the setValue function. Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/vuln/SNYK-JS-NISUTILS-598799
CVE ID: CVE-2020-7704 State: PUBLISHED Published: 2020-08-17T16:20:12.454883Z Last Updated: 2024-09-17T02:37:10.235Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: n/a Products: linux-cmdline Problem Types: Prototype Pollution Description: The package linux-cmdline before 1.0.1 are vulnerable to Prototype Pollution via the constructor. Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/vuln/SNYK-JS-LINUXCMDLINE-598674 - https://github.com/piranna/linux-cmdline/commit/53c61a88bc47eb25d71832205056beaab95cf677
CVE ID: CVE-2020-7705 State: PUBLISHED Published: 2020-08-24T17:15:15.656010Z Last Updated: 2024-09-16T19:46:34.178Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N/E:H/RL:U/RC:C) Vendors: n/a Products: MintegralAdSDK Problem Types: Malicious Package Description: This affects the package MintegralAdSDK from 0.0.0. The SDK distributed by the company contains malicious functionality that tracks any URL opened by the app and reports it back to the company, along with performing advertisement attribution fraud. Mintegral can remotely activate hooks on the UIApplication, openURL, SKStoreProductViewController, loadProductWithParameters and NSURLProtocol methods along with ant
UIApplication, openURL, SKStoreProductViewController, loadProductWithParameters and NSURLProtocol methods along with anti-debug and proxy detection protection. If those hooks are active MintegralAdSDK sends obfuscated data about every opened URL in an application to their servers. Note that the malicious functionality is enabled even if the SDK was not enabled to serve ads. Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/vuln/SNYK-COCOAPODS-MINTEGRALADSDK-598852 - https://snyk.io/blog/sourmint-malicious-code-ad-fraud-and-data-leak-in-ios/ - https://snyk.io/research/sour-mint-malicious-sdk/
CVE ID: CVE-2020-7706 State: PUBLISHED Published: 2020-08-18T09:20:12.686008Z Last Updated: 2024-09-16T16:27:26.913Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C) Vendors: n/a Products: connie-lang Problem Types: Prototype Pollution Description: The package connie-lang before 0.1.1 are vulnerable to Prototype Pollution in the configuration language library used by connie. Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/vuln/SNYK-JS-CONNIELANG-598853 - https://github.com/mattinsler/connie-lang/commit/ef376d404c712dd28309ba07f28a8f87f24a015a
CVE ID: CVE-2020-7707 State: PUBLISHED Published: 2020-08-18T13:40:12.220602Z Last Updated: 2024-09-16T22:08:43.138Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C) Vendors: n/a Products: property-expr Problem Types: Prototype Pollution Description: The package property-expr before 2.0.3 are vulnerable to Prototype Pollution via the setter function. Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/vuln/SNYK-JS-PROPERTYEXPR-598800 - https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-598857 - https://github.com/jquense/expr/commit/df846910915d59f711ce63c1f817815bceab5ff7
CVE ID: CVE-2020-7708 State: PUBLISHED Published: 2020-08-18T14:35:12.630013Z Last Updated: 2024-09-16T20:57:43.528Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: n/a Products: irrelon-path, @irrelon/path Problem Types: Prototype Pollution Description: The package irrelon-path before 4.7.0; the package @irrelon/path before 4.7.0 are vulnerable to Prototype Pollution via the set, unSet, pushVal and pullVal functions. Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/vuln/SNYK-JS-IRRELONPATH-598672 - https://snyk.io/vuln/SNYK-JS-IRRELONPATH-598673 - https://github.com/Irrelon/irrelon-path/commit/8a126b160c1a854a
8672 - https://snyk.io/vuln/SNYK-JS-IRRELONPATH-598673 - https://github.com/Irrelon/irrelon-path/commit/8a126b160c1a854ae511659c111413ad9910ebe3
CVE ID: CVE-2020-7709 State: PUBLISHED Published: 2020-10-05T07:50:14.736702Z Last Updated: 2024-09-16T20:51:36.000Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H) Vendors: n/a Products: json-pointer Problem Types: Prototype Pollution Description: This affects the package json-pointer before 0.6.1. Multiple reference of object using slash is supported. Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/vuln/SNYK-JS-JSONPOINTER-596925 - https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-598862 - https://github.com/manuelstofer/json-pointer/pull/34/files
CVE ID: CVE-2020-7710 State: PUBLISHED Published: 2020-08-21T09:15:13.975137Z Last Updated: 2024-09-16T19:26:06.364Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C) Vendors: n/a Products: safe-eval Problem Types: Sandbox Escape Description: This affects all versions of package safe-eval. It is possible for an attacker to run an arbitrary command on the host machine. Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/vuln/SNYK-JS-SAFEEVAL-608076 - https://github.com/hacksparrow/safe-eval/issues/19
CVE ID: CVE-2020-7711 State: PUBLISHED Published: 2020-08-23T13:35:12.024871Z Last Updated: 2024-09-17T02:15:47.899Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P) Vendors: n/a Products: github.com/russellhaering/goxmldsig Problem Types: Denial of Service (DoS) Description: This affects all versions of package github.com/russellhaering/goxmldsig. There is a crash on nil-pointer dereference caused by sending malformed XML signatures. Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/vuln/SNYK-GOLANG-GITHUBCOMRUSSELLHAERINGGOXMLDSIG-608301 - https://github.com/russellhaering/goxmldsig/issues/48
CVE ID: CVE-2020-7712 State: PUBLISHED Published: 2020-08-30T07:15:16.008893Z Last Updated: 2024-09-17T02:46:56.982Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: n/a Products: json Problem Types: Command Injection Description: This affects the package json before 10.0.0. It is possible to inject arbritary commands using the parseLookup function. Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/vuln/SNYK-JS-JSON-597481 - https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-608931 - https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARS-608932 - https://github.com/trentm/json/issues/144 - https://github.com/trentm/json/pull/145 - https://lists.apac
EBJARS-608932 - https://github.com/trentm/json/issues/144 - https://github.com/trentm/json/pull/145 - https://lists.apache.org/thread.html/r8d2e174230f6d26e16c007546e804c343f1f68956f526daaafa4aaae%40%3Cdev.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/rd9b9cc843f5cf5b532bdad9e87a817967efcf52b917e8c43b6df4cc7%40%3Cissues.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/ree3abcd33c06ee95ab59faa1751198a1186d8941ddc2c2562c12966c%40%3Cissues.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/rb023d54a46da1ac0d8969097f5fecc79636b07d3b80db7b818a5c55c%40%3Cissues.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/rb2b981912446a74e14fe6076c4b7c7d
b7b818a5c55c%40%3Cissues.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/rb2b981912446a74e14fe6076c4b7c7d8502727ea0718e6a65a9b1be5%40%3Cissues.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/r9c6d28e5b9a9b3481b7d1f90f1c2f75cd1a5ade91038426e0fb095da%40%3Cdev.flink.apache.org%3E - https://lists.apache.org/thread.html/r977a907ecbedf87ae5ba47d4c77639efb120f74d4d1b3de14a4ef4da%40%3Cissues.flink.apache.org%3E - https://lists.apache.org/thread.html/r5f17bfca1d6e7f4b33ae978725b2fd62a9f1b3111696eafa9add802d%40%3Cissues.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/ra890c24b3d90be36daf48ae76b263acb297003db24c1122f8e4aaef2%40%3Cissues.flink.apache.org%3E -
lists.apache.org/thread.html/ra890c24b3d90be36daf48ae76b263acb297003db24c1122f8e4aaef2%40%3Cissues.flink.apache.org%3E - https://lists.apache.org/thread.html/rba7ea4d75d6a8e5b935991d960d9b893fd30e576c4d3b531084ebd7d%40%3Cissues.flink.apache.org%3E - https://lists.apache.org/thread.html/rb89bd82dffec49f83b49e9ad625b1b63a408b3c7d1a60d6f049142a0%40%3Cissues.flink.apache.org%3E - https://lists.apache.org/thread.html/rec8bb4d637b04575da41cfae49118e108e95d43bfac39b7b698ee4db%40%3Cissues.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/r37c0e1807da7ff2bdd028bbe296465a6bbb99e2320dbe661d5d8b33b%40%3Cissues.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/r3b04f4e99a19613f8
a6bbb99e2320dbe661d5d8b33b%40%3Cissues.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/r3b04f4e99a19613f88ae088aa18cd271231a3c79dfff8f5efa8cda61%40%3Cissues.zookeeper.apache.org%3E - https://www.oracle.com//security-alerts/cpujul2021.html - https://www.oracle.com/security-alerts/cpujan2022.html - https://www.oracle.com/security-alerts/cpujul2022.html
CVE ID: CVE-2020-7713 State: PUBLISHED Published: 2020-09-01T09:10:11.703831Z Last Updated: 2024-09-16T19:31:22.363Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: n/a Products: arr-flatten-unflatten Problem Types: Prototype Pollution Description: All versions of package arr-flatten-unflatten are vulnerable to Prototype Pollution via the constructor. Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/vuln/SNYK-JS-ARRFLATTENUNFLATTEN-598396
CVE ID: CVE-2020-7714 State: PUBLISHED Published: 2020-09-01T09:20:19.793657Z Last Updated: 2024-09-16T20:32:54.056Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: n/a Products: confucious Problem Types: Prototype Pollution Description: All versions of package confucious are vulnerable to Prototype Pollution via the set function. Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/vuln/SNYK-JS-CONFUCIOUS-598665
CVE ID: CVE-2020-7715 State: PUBLISHED Published: 2020-09-01T09:20:15.805292Z Last Updated: 2024-09-16T20:58:26.968Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: n/a Products: deep-get-set Problem Types: Prototype Pollution Description: All versions of package deep-get-set are vulnerable to Prototype Pollution via the main function. Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/vuln/SNYK-JS-DEEPGETSET-598666