Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-0993 State: PUBLISHED Published: 2018-04-12T01:00:00 Last Updated: 2024-08-05T03:44:11.910Z Vendors: Microsoft Products: Microsoft Edge, ChakraCore Problem Types: Remote Code Execution Description: A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-0979, CVE-2018-0980, CVE-2018-0990, CVE-2018-0994, CVE-2018-0995, CVE-2018-1019. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103627 - http://www.securitytrac
Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103627 - http://www.securitytracker.com/id/1040650 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0993
CVE ID: CVE-2018-0994 State: PUBLISHED Published: 2018-04-12T01:00:00 Last Updated: 2024-08-05T03:44:11.922Z Vendors: Microsoft Products: Microsoft Edge, ChakraCore Problem Types: Remote Code Execution Description: A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-0979, CVE-2018-0980, CVE-2018-0990, CVE-2018-0993, CVE-2018-0995, CVE-2018-1019. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1040650 - https://portal.msrc.m
Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1040650 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0994 - http://www.securityfocus.com/bid/103630
CVE ID: CVE-2018-0995 State: PUBLISHED Published: 2018-04-12T01:00:00 Last Updated: 2024-08-05T03:44:11.853Z Vendors: Microsoft Products: Microsoft Edge, ChakraCore Problem Types: Remote Code Execution Description: A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-0979, CVE-2018-0980, CVE-2018-0990, CVE-2018-0993, CVE-2018-0994, CVE-2018-1019. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103631 - http://www.securitytrac
Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103631 - http://www.securitytracker.com/id/1040650 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0995
CVE ID: CVE-2018-0996 State: PUBLISHED Published: 2018-04-12T01:00:00 Last Updated: 2024-08-05T03:44:11.718Z Vendors: Microsoft Products: Internet Explorer 9, Internet Explorer 11, Internet Explorer 10 Problem Types: Remote Code Execution Description: A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. This CVE ID is unique from CVE-2018-0988, CVE-2018-1001. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1040653 - https://portal.msr
nal Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1040653 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0996 - http://www.securityfocus.com/bid/103602
CVE ID: CVE-2018-0997 State: PUBLISHED Published: 2018-04-12T01:00:00 Last Updated: 2024-08-05T03:44:11.691Z Vendors: Microsoft Products: Internet Explorer 11 Problem Types: Remote Code Execution Description: A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption Vulnerability." This affects Internet Explorer 11. This CVE ID is unique from CVE-2018-0870, CVE-2018-0991, CVE-2018-1018, CVE-2018-1020. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103618 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0997 - http://www.secu
ocus.com/bid/103618 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0997 - http://www.securitytracker.com/id/1040653
CVE ID: CVE-2018-0998 State: PUBLISHED Published: 2018-04-12T01:00:00 Last Updated: 2024-08-05T03:44:11.811Z Vendors: Microsoft Products: Microsoft Edge Problem Types: Information Disclosure Description: An information disclosure vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory, aka "Microsoft Edge Information Disclosure Vulnerability." This affects Microsoft Edge. This CVE ID is unique from CVE-2018-0892. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103598 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0998 - http://www.securitytracker.com/id/1040650
CVE ID: CVE-2018-1000001 State: PUBLISHED Published: 2018-01-31T14:00:00 Last Updated: 2024-08-05T12:33:48.490Z Vendors: n/a Products: n/a Problem Types: n/a Description: In glibc 2.26 and earlier there is confusion in the usage of getcwd() by realpath() which can be used to write before the destination buffer leading to a buffer underflow and potential code execution. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2018/q1/38 - https://usn.ubuntu.com/3534-1/ - https://www.halfdog.net/Security/2017/LibcRealpathBufferUnderflow/ - http://www.securityfocus.com/bid/102525 - https://www.exploit-db.com/exploits/44889/ - https://www.exploit-db.com/exploi
http://www.securityfocus.com/bid/102525 - https://www.exploit-db.com/exploits/44889/ - https://www.exploit-db.com/exploits/43775/ - https://usn.ubuntu.com/3536-1/ - https://access.redhat.com/errata/RHSA-2018:0805 - http://www.securitytracker.com/id/1040162 - https://security.netapp.com/advisory/ntap-20190404-0003/
CVE ID: CVE-2018-1000002 State: PUBLISHED Published: 2018-01-22T18:00:00 Last Updated: 2024-08-05T12:33:48.923Z Vendors: n/a Products: n/a Problem Types: n/a Description: Improper input validation bugs in DNSSEC validators components in Knot Resolver (prior version 1.5.2) allow attacker in man-in-the-middle position to deny existence of some data in DNS via packet replay. Additional Analyst Notes: - CVE Program Container: References: - https://www.knot-resolver.cz/2018-01-22-knot-resolver-1.5.2.html
CVE ID: CVE-2018-1000003 State: PUBLISHED Published: 2018-01-22T18:00:00 Last Updated: 2024-08-05T12:33:48.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: Improper input validation bugs in DNSSEC validators components in PowerDNS version 4.1.0 allow attacker in man-in-the-middle position to deny existence of some data in DNS via packet replay. Additional Analyst Notes: - CVE Program Container: References: - https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2018-01.html
CVE ID: CVE-2018-1000004 State: PUBLISHED Published: 2018-01-16T20:00:00 Last Updated: 2024-08-05T12:33:48.504Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Linux kernel 4.12, 3.10, 2.6 and possibly earlier versions a race condition vulnerability exists in the sound system, this can lead to a deadlock and denial of service condition. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3631-2/ - https://www.debian.org/security/2018/dsa-4187 - https://usn.ubuntu.com/3631-1/ - https://access.redhat.com/errata/RHSA-2018:2390 - http://www.securityfocus.com/bid/104606 - https://access.redhat.com/errata/RHSA-2018:1062 - https://access.redhat.
390 - http://www.securityfocus.com/bid/104606 - https://access.redhat.com/errata/RHSA-2018:1062 - https://access.redhat.com/errata/RHSA-2018:0654 - https://access.redhat.com/errata/RHSA-2018:0676 - http://seclists.org/oss-sec/2018/q1/51 - https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html - https://usn.ubuntu.com/3798-1/ - https://usn.ubuntu.com/3798-2/ - https://access.redhat.com/errata/RHSA-2019:1483 - https://www.oracle.com/security-alerts/cpujul2020.html - https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html - https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0
CVE ID: CVE-2018-1000005 State: PUBLISHED Published: 2018-01-24T22:00:00 Last Updated: 2024-08-05T12:33:49.200Z Vendors: n/a Products: n/a Problem Types: n/a Description: libcurl 7.49.0 to and including 7.57.0 contains an out bounds read in code handling HTTP/2 trailers. It was reported (https://github.com/curl/curl/pull/2231) that reading an HTTP/2 trailer could mess up future trailers since the stored size was one byte less than required. The problem is that the code that creates HTTP/1-like headers from the HTTP/2 trailer data once appended a string like `:` to the target buffer, while this was recently changed to `: ` (a space was added after the colon) but the following math wasn't upda
t buffer, while this was recently changed to `: ` (a space was added after the colon) but the following math wasn't updated correspondingly. When accessed, the data is read out of bounds and causes either a crash or that the (too large) data gets passed to client write. This could lead to a denial-of-service situation or an information disclosure if someone has a service that echoes back or uses the trailers for something. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1040273 - https://usn.ubuntu.com/3554-1/ - https://www.debian.org/security/2018/dsa-4098 - https://curl.haxx.se/docs/adv_2018-824a.html - https://github.com/curl/curl/pull/22
.debian.org/security/2018/dsa-4098 - https://curl.haxx.se/docs/adv_2018-824a.html - https://github.com/curl/curl/pull/2231 - https://access.redhat.com/errata/RHSA-2019:1543
CVE ID: CVE-2018-1000006 State: PUBLISHED Published: 2018-01-24T23:00:00 Last Updated: 2024-08-05T12:33:49.215Z Vendors: n/a Products: n/a Problem Types: n/a Description: GitHub Electron versions 1.8.2-beta.3 and earlier, 1.7.10 and earlier, 1.6.15 and earlier has a vulnerability in the protocol handler, specifically Electron apps running on Windows 10, 7 or 2008 that register custom protocol handlers can be tricked in arbitrary command execution if the user clicks on a specially crafted URL. This has been fixed in versions 1.8.2-beta.4, 1.7.11, and 1.6.16. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/43899/ - https://github.com/electro
st Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/43899/ - https://github.com/electron/electron/releases/tag/v1.8.2-beta.4 - https://medium.com/%40Wflki/exploiting-electron-rce-in-exodus-wallet-d9e6db13c374 - https://electronjs.org/blog/protocol-handler-fix - http://www.securityfocus.com/bid/102796 - https://www.exploit-db.com/exploits/44357/
CVE ID: CVE-2018-1000007 State: PUBLISHED Published: 2018-01-24T22:00:00 Last Updated: 2024-08-05T12:33:48.439Z Vendors: n/a Products: n/a Problem Types: n/a Description: libcurl 7.1 through 7.57.0 might accidentally leak authentication data to third parties. When asked to send custom headers in its HTTP requests, libcurl will send that set of headers first to the host in the initial URL but also, if asked to follow redirects and a 30X HTTP response code is returned, to the host mentioned in URL in the `Location:` response header value. Sending the same set of headers to subsequent hosts is in particular a problem for applications that pass on custom `Authorization:` headers, as this header
bsequent hosts is in particular a problem for applications that pass on custom `Authorization:` headers, as this header often contains privacy sensitive information or data that could allow others to impersonate the libcurl-using client's request. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3554-2/ - https://usn.ubuntu.com/3554-1/ - https://access.redhat.com/errata/RHSA-2018:3558 - https://www.debian.org/security/2018/dsa-4098 - https://curl.haxx.se/docs/adv_2018-b3bf.html - http://www.securitytracker.com/id/1040274 - https://access.redhat.com/errata/RHSA-2018:3157 - https://lists.debian.org/debian-lts-announce/2018/01/msg00038.html - https://acces
ss.redhat.com/errata/RHSA-2018:3157 - https://lists.debian.org/debian-lts-announce/2018/01/msg00038.html - https://access.redhat.com/errata/RHBA-2019:0327 - https://access.redhat.com/errata/RHSA-2019:1543 - https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html - https://access.redhat.com/errata/RHSA-2020:0544 - https://access.redhat.com/errata/RHSA-2020:0594 - http://www.openwall.com/lists/oss-security/2022/04/27/4
CVE ID: CVE-2018-1000008 State: PUBLISHED Published: 2018-01-23T14:00:00 Last Updated: 2024-08-05T12:33:48.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jenkins PMD Plugin 3.49 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers with user permissions in Jenkins to extract secrets from the Jenkins master, perform server-side request forgery, or denial-of-service attacks. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2018-01-22/ - http://www.securityfocus.com/bid/102844
CVE ID: CVE-2018-1000009 State: PUBLISHED Published: 2018-01-23T14:00:00Z Last Updated: 2024-09-16T23:16:34.096Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jenkins Checkstyle Plugin 3.49 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers with user permissions in Jenkins to extract secrets from the Jenkins master, perform server-side request forgery, or denial-of-service attacks. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2018-01-22/
CVE ID: CVE-2018-1000010 State: PUBLISHED Published: 2018-01-23T14:00:00Z Last Updated: 2024-09-16T18:33:42.868Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jenkins DRY Plugin 2.49 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers with user permissions in Jenkins to extract secrets from the Jenkins master, perform server-side request forgery, or denial-of-service attacks. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2018-01-22/
CVE ID: CVE-2018-1000011 State: PUBLISHED Published: 2018-01-23T14:00:00Z Last Updated: 2024-09-16T17:15:13.071Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jenkins FindBugs Plugin 4.71 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers with user permissions in Jenkins to extract secrets from the Jenkins master, perform server-side request forgery, or denial-of-service attacks. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2018-01-22/
CVE ID: CVE-2018-1000012 State: PUBLISHED Published: 2018-01-23T14:00:00Z Last Updated: 2024-09-17T01:21:10.531Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jenkins Warnings Plugin 4.64 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers with user permissions in Jenkins to extract secrets from the Jenkins master, perform server-side request forgery, or denial-of-service attacks. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2018-01-22/
CVE ID: CVE-2018-1000013 State: PUBLISHED Published: 2018-01-23T14:00:00 Last Updated: 2024-08-05T12:33:49.022Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jenkins Release Plugin 2.9 and earlier did not require form submissions to be submitted via POST, resulting in a CSRF vulnerability allowing attackers to trigger release builds. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102834 - https://jenkins.io/security/advisory/2018-01-22/
CVE ID: CVE-2018-1000014 State: PUBLISHED Published: 2018-01-23T14:00:00 Last Updated: 2024-08-05T12:33:48.792Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jenkins Translation Assistance Plugin 1.15 and earlier did not require form submissions to be submitted via POST, resulting in a CSRF vulnerability allowing attackers to override localized strings displayed to all users on the current Jenkins instance if the victim is a Jenkins administrator. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2018-01-22/ - http://www.securityfocus.com/bid/102809
CVE ID: CVE-2018-1000015 State: PUBLISHED Published: 2018-01-23T14:00:00Z Last Updated: 2024-09-17T03:03:42.519Z Vendors: n/a Products: n/a Problem Types: n/a Description: On Jenkins instances with Authorize Project plugin, the authentication associated with a build may lack the Computer/Build permission on some agents. This did not prevent the execution of Pipeline `node` blocks on those agents due to incorrect permissions checks in Pipeline: Nodes and Processes plugin 2.17 and earlier. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2018-01-22/
CVE ID: CVE-2018-1000016 State: REJECTED Published: 2018-01-23T14:00:00 Last Updated: 2018-01-25T16:57:01 Description: No description available.
CVE ID: CVE-2018-1000017 State: REJECTED Published: 2018-01-26T02:00:00 Last Updated: 2018-01-29T13:57:01 Description: No description available.
CVE ID: CVE-2018-1000018 State: PUBLISHED Published: 2018-01-24T14:00:00Z Last Updated: 2024-09-17T00:06:55.577Z Vendors: n/a Products: n/a Problem Types: n/a Description: An information disclosure in ovirt-hosted-engine-setup prior to 2.2.7 reveals the root user's password in the log file. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1536941 - https://gerrit.ovirt.org/#/c/86635/
CVE ID: CVE-2018-1000019 State: PUBLISHED Published: 2018-02-09T23:00:00 Last Updated: 2024-08-05T12:33:48.686Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenEMR version 5.0.0 contains a OS Command Injection vulnerability in fax_dispatch.php that can result in OS command injection by an authenticated attacker with any role. This vulnerability appears to have been fixed in 5.0.0 Patch 2 or higher. Additional Analyst Notes: - CVE Program Container: References: - https://www.sec-consult.com/en/blog/advisories/os-command-injection-reflected-cross-site-scripting-in-openemr/index.html - http://www.open-emr.org/wiki/index.php/OpenEMR_Patches
CVE ID: CVE-2018-1000020 State: PUBLISHED Published: 2018-02-09T23:00:00 Last Updated: 2024-08-05T12:33:48.498Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenEMR version 5.0.0 contains a Cross Site Scripting (XSS) vulnerability in open-flash-chart.swf and _posteddata.php that can result in . This vulnerability appears to have been fixed in 5.0.0 Patch 2 or higher. Additional Analyst Notes: - CVE Program Container: References: - https://www.sec-consult.com/en/blog/advisories/os-command-injection-reflected-cross-site-scripting-in-openemr/index.html - http://www.open-emr.org/wiki/index.php/OpenEMR_Patches
CVE ID: CVE-2018-1000021 State: PUBLISHED Published: 2018-02-09T23:00:00 Last Updated: 2024-08-05T12:33:48.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: GIT version 2.15.1 and earlier contains a Input Validation Error vulnerability in Client that can result in problems including messing up terminal configuration to RCE. This attack appear to be exploitable via The user must interact with a malicious git server, (or have their traffic modified in a MITM attack). Additional Analyst Notes: - CVE Program Container: References: - http://www.batterystapl.es/2018/01/security-implications-of-ansi-escape.html
CVE ID: CVE-2018-1000022 State: PUBLISHED Published: 2018-02-09T23:00:00 Last Updated: 2024-08-05T12:33:48.467Z Vendors: n/a Products: n/a Problem Types: n/a Description: Electrum Technologies GmbH Electrum Bitcoin Wallet version prior to version 3.0.5 contains a Missing Authorization vulnerability in JSONRPC interface that can result in Bitcoin theft, if the user's wallet is not password protected. This attack appear to be exploitable via The victim must visit a web page with specially crafted javascript. This vulnerability appears to have been fixed in 3.0.5. Additional Analyst Notes: - CVE Program Container: References: - https://www.reddit.com/r/Bitcoin/comments/7ooack/critical_electrum_
nalyst Notes: - CVE Program Container: References: - https://www.reddit.com/r/Bitcoin/comments/7ooack/critical_electrum_vulnerability/ - https://github.com/spesmilo/electrum/issues/3374 - https://electrum.org/#home - https://bitcointalk.org/index.php?topic=2702103.0
CVE ID: CVE-2018-1000023 State: PUBLISHED Published: 2018-02-09T23:00:00 Last Updated: 2024-08-05T12:33:48.735Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bitpay/insight-api Insight-api version 5.0.0 and earlier contains a CWE-20: input validation vulnerability in transaction broadcast endpoint that can result in Full Path Disclosure. This attack appear to be exploitable via Web request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bitpay/insight-api/issues/542
CVE ID: CVE-2018-1000024 State: PUBLISHED Published: 2018-02-09T23:00:00 Last Updated: 2024-08-05T12:33:48.901Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Squid Software Foundation Squid HTTP Caching Proxy version 3.0 to 3.5.27, 4.0 to 4.0.22 contains a Incorrect Pointer Handling vulnerability in ESI Response Processing that can result in Denial of Service for all clients using the proxy.. This attack appear to be exploitable via Remote server delivers an HTTP response payload containing valid but unusual ESI syntax.. This vulnerability appears to have been fixed in 4.0.23 and later. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3
een fixed in 4.0.23 and later. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3557-1/ - https://www.debian.org/security/2018/dsa-4122 - http://www.squid-cache.org/Versions/ - https://lists.debian.org/debian-lts-announce/2018/02/msg00001.html - http://www.squid-cache.org/Advisories/SQUID-2018_1.txt - https://usn.ubuntu.com/4059-2/
CVE ID: CVE-2018-1000025 State: PUBLISHED Published: 2018-02-09T23:00:00 Last Updated: 2024-08-05T12:33:49.017Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jerome Gamez Firebase Admin SDK for PHP version from 3.2.0 to 3.8.0 contains a Incorrect Access Control vulnerability in src/Firebase/Auth/IdTokenVerifier.php does not verify for token signature that can result in JWT with any email address and user ID could be forged from an actual token, or from thin air. This attack appear to be exploitable via Attacker would only need to know email address of the victim on most cases.. This vulnerability appears to have been fixed in 3.8.1. Additional Analyst Notes: - CVE Program Contai
m on most cases.. This vulnerability appears to have been fixed in 3.8.1. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kreait/firebase-php/releases/tag/3.8.1 - https://github.com/kreait/firebase-php/pull/151