Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ngs, the configuration of the bios, grub, the kernel cmdline, initrd, and more. However, this mechanism does not validate the entire rootfs, so an attacker can edit the filesystem and gain control over the system. As the default filesystem used by EVE OS is squashfs, this is somewhat harder than an ext4, which is easily changeable. This will not stop an attacker, as an attacker can repackage the squashfs with their changes in it and replace the partition altogether. This can also be done directly on the device, as the “003-storage-init” container contains the “mksquashfs” and “unsquashfs” binaries (with the corresponding libs). An attacker can gain full control over the device without changi
nd “unsquashfs” binaries (with the corresponding libs). An attacker can gain full control over the device without changing the PCR values, thus not triggering the “measured boot” mechanism, and having full access to the vault. Note: This issue was partially fixed in these commits (after disclosure to Zededa), where the config partition measurement was added to PCR13: • aa3501d6c57206ced222c33aea15a9169d629141 • 5fef4d92e75838cc78010edaed5247dfbdae1889. This issue was made viable in version 9.0.0 when the calculation was moved to PCR14 but it was not included in the measured boot. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://asrg.io/securit
boot. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://asrg.io/security-advisories/cve-2023-43636/
CVE ID: CVE-2023-43637 State: PUBLISHED Published: 2023-09-21T13:20:05.473Z Last Updated: 2024-09-24T17:48:30.086Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: LF-Edge, Zededa Products: EVE OS Problem Types: CWE-321 Description: Due to the implementation of "deriveVaultKey", prior to version 7.10, the generated vault key would always have the last 16 bytes predetermined to be "arfoobarfoobarfo". This issue happens because "deriveVaultKey" calls "retrieveCloudKey" (which will always return "foobarfoobarfoobarfoobarfoobarfo" as the key), and then merges the 32byte randomly generated key with this key (by takeing 16bytes from each, see "mergeKeys"). This makes
then merges the 32byte randomly generated key with this key (by takeing 16bytes from each, see "mergeKeys"). This makes the key a lot weaker. This issue does not persist in devices that were initialized on/after version 7.10, but devices that were initialized before that and updated to a newer version still have this issue. Roll an update that enforces the full 32bytes key usage. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://asrg.io/security-advisories/cve-2023-43637/
CVE ID: CVE-2023-43640 State: PUBLISHED Published: 2023-09-22T17:11:42.290Z Last Updated: 2024-09-24T14:23:46.578Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: SpeciesFileGroup Products: taxonworks Problem Types: CWE-89 Description: TaxonWorks is a web-based workbench designed for taxonomists and biodiversity scientists. Prior to version 0.34.0, a SQL injection vulnerability was found in TaxonWorks that allows authenticated attackers to extract arbitrary data from the TaxonWorks database (including the users table). This issue may lead to information disclosure. Version 0.34.0 contains a fix for the issue. Additional Analyst Notes: - CVE Program Container
o information disclosure. Version 0.34.0 contains a fix for the issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/SpeciesFileGroup/taxonworks/security/advisories/GHSA-m9p2-jxr6-4p6c - https://github.com/SpeciesFileGroup/taxonworks/commit/a98f2dc610a541678e1e51af47659cd8b30179ae
CVE ID: CVE-2023-43641 State: PUBLISHED Published: 2023-10-09T21:01:04.603Z Last Updated: 2025-02-13T17:13:25.983Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: lipnitsk Products: libcue Problem Types: CWE-787 Description: libcue provides an API for parsing and extracting data from CUE sheets. Versions 2.2.1 and prior are vulnerable to out-of-bounds array access. A user of the GNOME desktop environment can be exploited by downloading a cue sheet from a malicious webpage. Because the file is saved to `~/Downloads`, it is then automatically scanned by tracker-miners. And because it has a .cue filename extension, tracker-miners use libcue to parse the file. The
canned by tracker-miners. And because it has a .cue filename extension, tracker-miners use libcue to parse the file. The file exploits the vulnerability in libcue to gain code execution. This issue is patched in version 2.3.0. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.blog/2023-10-09-coordinated-disclosure-1-click-rce-on-gnome-cve-2023-43641/ - https://github.com/lipnitsk/libcue/security/advisories/GHSA-5982-x7hv-r9cj - https://github.com/lipnitsk/libcue/commit/cfb98a060fd79dbc3463d85f0f29c3c335dfa0ea - https://github.com/lipnitsk/libcue/commit/fdf72c8bded8d24cfa0608b8e97f2eed210a920e - https://lists.fedoraproject.org/archives/li
github.com/lipnitsk/libcue/commit/fdf72c8bded8d24cfa0608b8e97f2eed210a920e - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/57JEYTRFG4PVGZZ7HIEFTX5I7OONFFMI/ - https://lists.debian.org/debian-lts-announce/2023/10/msg00018.html - https://www.debian.org/security/2023/dsa-5524 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PGQOMFDBXGM3DOICCXKCUS76OTKTSPMN/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XUS4HTNGGGUIFLYSKTODCRIOXLX5HGV3/ - http://packetstormsecurity.com/files/176128/libcue-2.2.1-Out-Of-Bounds-Access.html
CVE ID: CVE-2023-43642 State: PUBLISHED Published: 2023-09-25T19:03:49.145Z Last Updated: 2024-09-24T15:26:53.851Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: xerial Products: snappy-java Problem Types: CWE-770 Description: snappy-java is a Java port of the snappy, a fast C++ compresser/decompresser developed by Google. The SnappyInputStream was found to be vulnerable to Denial of Service (DoS) attacks when decompressing data with a too large chunk size. Due to missing upper bound check on chunk length, an unrecoverable fatal error can occur. All versions of snappy-java including the latest released version 1.1.10.3 are vulnerable to this issue. A fix has
cur. All versions of snappy-java including the latest released version 1.1.10.3 are vulnerable to this issue. A fix has been introduced in commit `9f8c3cf74` which will be included in the 1.1.10.4 release. Users are advised to upgrade. Users unable to upgrade should only accept compressed data from trusted sources. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/xerial/snappy-java/security/advisories/GHSA-55g7-9cwv-5qfv - https://github.com/xerial/snappy-java/commit/9f8c3cf74223ed0a8a834134be9c917b9f10ceb5
CVE ID: CVE-2023-43643 State: PUBLISHED Published: 2023-10-09T13:31:46.324Z Last Updated: 2024-09-19T13:57:25.721Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: nahsra Products: antisamy Problem Types: CWE-79 Description: AntiSamy is a library for performing fast, configurable cleansing of HTML coming from untrusted sources. Prior to version 1.7.4, there is a potential for a mutation XSS (mXSS) vulnerability in AntiSamy caused by flawed parsing of the HTML being sanitized. To be subject to this vulnerability the `preserveComments` directive must be enabled in your policy file and also allow for certain tags at the same time. As a result, certain crafty inp
ve must be enabled in your policy file and also allow for certain tags at the same time. As a result, certain crafty inputs can result in elements in comment tags being interpreted as executable when using AntiSamy's sanitized output. This issue has been patched in AntiSamy 1.7.4 and later. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/nahsra/antisamy/security/advisories/GHSA-pcf2-gh6g-h5r2 - https://github.com/nahsra/antisamy/releases/tag/v1.7.4
CVE ID: CVE-2023-43644 State: PUBLISHED Published: 2023-09-25T19:12:35.949Z Last Updated: 2024-09-24T19:29:54.599Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H) Vendors: SagerNet Products: sing-box Problem Types: CWE-306 Description: Sing-box is an open source proxy system. Affected versions are subject to an authentication bypass when specially crafted requests are sent to sing-box. This affects all SOCKS5 inbounds with user authentication and an attacker may be able to bypass authentication. Users are advised to update to sing-box 1.4.4 or to 1.5.0-rc.4. Users unable to update should not expose the SOCKS5 inbound to insecure environments. Additional Analyst Not
1.5.0-rc.4. Users unable to update should not expose the SOCKS5 inbound to insecure environments. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/SagerNet/sing-box/security/advisories/GHSA-r5hm-mp3j-285g
CVE ID: CVE-2023-43645 State: PUBLISHED Published: 2023-09-26T20:58:17.826Z Last Updated: 2024-09-23T20:20:10.674Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: openfga Products: openfga Problem Types: CWE-835 Description: OpenFGA is an authorization/permission engine built for developers and inspired by Google Zanzibar. OpenFGA is vulnerable to a denial of service attack when certain Check calls are executed against authorization models that contain circular relationship definitions. When the call is made, it's possible for the server to exhaust resources and die. Users are advised to upgrade to v1.3.2 and update any offending models. There are no known w
exhaust resources and die. Users are advised to upgrade to v1.3.2 and update any offending models. There are no known workarounds for this vulnerability. Note that for models which contained cycles or a relation definition that has the relation itself in its evaluation path, checks and queries that require evaluation will no longer be evaluated on v1.3.2+ and will return errors instead. Users who do not have cyclic models are unaffected. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/openfga/openfga/security/advisories/GHSA-2hm9-h873-pgqh - https://github.com/openfga/openfga/commit/725296025fd81227c89525808652c6acd4a605f6
CVE ID: CVE-2023-43646 State: PUBLISHED Published: 2023-09-26T18:19:29.443Z Last Updated: 2024-09-24T17:26:54.512Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H) Vendors: chaijs Products: get-func-name Problem Types: CWE-400, CWE-1333 Description: get-func-name is a module to retrieve a function's name securely and consistently both in NodeJS and the browser. Versions prior to 2.0.1 are subject to a regular expression denial of service (redos) vulnerability which may lead to a denial of service when parsing malicious input. This vulnerability can be exploited when there is an imbalance in parentheses, which results in excessive backtracking and subsequently increases
exploited when there is an imbalance in parentheses, which results in excessive backtracking and subsequently increases the CPU load and processing time significantly. This vulnerability can be triggered using the following input: '\t'.repeat(54773) + '\t/function/i'. This issue has been addressed in commit `f934b228b` which has been included in releases from 2.0.1. Users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/chaijs/get-func-name/security/advisories/GHSA-4q6p-r6v2-jvc5 - https://github.com/chaijs/get-func-name/commit/f934b228b5e2cb94d6c8576d3aa
ame/security/advisories/GHSA-4q6p-r6v2-jvc5 - https://github.com/chaijs/get-func-name/commit/f934b228b5e2cb94d6c8576d3aac05493f667c69
CVE ID: CVE-2023-43647 State: PUBLISHED Published: 2023-10-30T18:18:35.381Z Last Updated: 2024-09-06T20:13:17.297Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: baserproject Products: basercms Problem Types: CWE-79 Description: baserCMS is a website development framework. Prior to version 4.8.0, there is a cross-site scripting vulnerability in the file upload feature of baserCMS. Version 4.8.0 contains a patch for this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/baserproject/basercms/security/advisories/GHSA-ggj4-78rm-6xgv - https://github.com/baserproject/basercms/commit/eb5977533d05d
project/basercms/security/advisories/GHSA-ggj4-78rm-6xgv - https://github.com/baserproject/basercms/commit/eb5977533d05db4f3bb03bd19630b66052799b2e - https://basercms.net/security/JVN_24381990
CVE ID: CVE-2023-43648 State: PUBLISHED Published: 2023-10-30T18:24:24.733Z Last Updated: 2024-09-05T20:22:13.953Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: baserproject Products: basercms Problem Types: CWE-22 Description: baserCMS is a website development framework. Prior to version 4.8.0, there is a Directory Traversal Vulnerability in the form submission data management feature of baserCMS. Version 4.8.0 contains a patch for this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/baserproject/basercms/security/advisories/GHSA-hmqj-gv2m-hq55 - https://github.com/baserproject/basercms/c
://github.com/baserproject/basercms/security/advisories/GHSA-hmqj-gv2m-hq55 - https://github.com/baserproject/basercms/commit/7555a5cf0006755dc0223fffc2d882b50a97758b - https://basercms.net/security/JVN_81174674
CVE ID: CVE-2023-43649 State: PUBLISHED Published: 2023-10-30T18:29:26.783Z Last Updated: 2024-09-05T20:21:29.656Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L) Vendors: baserproject Products: basercms Problem Types: CWE-352 Description: baserCMS is a website development framework. Prior to version 4.8.0, there is a cross site request forgery vulnerability in the content preview feature of baserCMS. Version 4.8.0 contains a patch for this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/baserproject/basercms/security/advisories/GHSA-fw9x-cqjq-7jx5 - https://github.com/baserproject/basercms/commit/87
b.com/baserproject/basercms/security/advisories/GHSA-fw9x-cqjq-7jx5 - https://github.com/baserproject/basercms/commit/874c55433fead93e0be9df96fd28740f8047c8b6 - https://basercms.net/security/JVN_99052047
CVE ID: CVE-2023-43650 State: PUBLISHED Published: 2023-09-27T18:33:46.034Z Last Updated: 2025-03-25T19:24:24.277Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N) Vendors: jumpserver Products: jumpserver Problem Types: CWE-640 Description: JumpServer is an open source bastion host. The verification code for resetting user's password is vulnerable to brute-force attacks due to the absence of rate limiting. JumpServer provides a feature allowing users to reset forgotten passwords. Affected users are sent a 6-digit verification code, ranging from 000000 to 999999, to facilitate the password reset. Although the code is only available in 1 minute, this window potentially al
to 999999, to facilitate the password reset. Although the code is only available in 1 minute, this window potentially allows for up to 1,000,000 validation attempts. This issue has been addressed in versions 2.28.20 and 3.7.1. Users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/jumpserver/jumpserver/security/advisories/GHSA-mwx4-8fwc-2xvw - https://www.sonarsource.com/blog/diving-into-jumpserver-attackers-gateway-to-internal-networks-1-2
CVE ID: CVE-2023-43651 State: PUBLISHED Published: 2023-09-27T20:24:08.733Z Last Updated: 2025-03-25T19:35:30.016Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: jumpserver Products: jumpserver Problem Types: CWE-94 Description: JumpServer is an open source bastion host. An authenticated user can exploit a vulnerability in MongoDB sessions to execute arbitrary commands, leading to remote code execution. This vulnerability may further be leveraged to gain root privileges on the system. Through the WEB CLI interface provided by the koko component, a user logs into the authorized mongoDB database and exploits the MongoDB session to execute arbitrary commands. Th
ent, a user logs into the authorized mongoDB database and exploits the MongoDB session to execute arbitrary commands. This vulnerability has been addressed in versions 2.28.20 and 3.7.1. Users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/jumpserver/jumpserver/security/advisories/GHSA-4r5x-x283-wm96 - https://www.sonarsource.com/blog/diving-into-jumpserver-attackers-gateway-to-internal-networks-2-2
CVE ID: CVE-2023-43652 State: PUBLISHED Published: 2023-09-27T18:31:41.320Z Last Updated: 2025-03-25T19:27:03.036Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N) Vendors: jumpserver Products: jumpserver Problem Types: CWE-862 Description: JumpServer is an open source bastion host. As an unauthenticated user, it is possible to authenticate to the core API with a username and an SSH public key without needing a password or the corresponding SSH private key. An SSH public key should be considered public knowledge and should not used as an authentication secret alone. JumpServer provides an API for the KoKo component to validate user private key logins. This API does not
secret alone. JumpServer provides an API for the KoKo component to validate user private key logins. This API does not verify the source of requests and will generate a personal authentication token. Given that public keys can be easily leaked, an attacker can exploit the leaked public key and username to authenticate, subsequently gaining access to the current user's information and authorized actions. This issue has been addressed in versions 2.28.20 and 3.7.1. Users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/jumpserver/jumpserver/security/adviso
- CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/jumpserver/jumpserver/security/advisories/GHSA-fr8h-xh5x-r8g9 - https://www.sonarsource.com/blog/diving-into-jumpserver-attackers-gateway-to-internal-networks-1-2
CVE ID: CVE-2023-43654 State: PUBLISHED Published: 2023-09-28T22:10:09.497Z Last Updated: 2025-02-13T17:13:27.341Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: pytorch Products: serve Problem Types: CWE-918 Description: TorchServe is a tool for serving and scaling PyTorch models in production. TorchServe default configuration lacks proper input validation, enabling third parties to invoke remote HTTP download requests and write files to the disk. This issue could be taken advantage of to compromise the integrity of the system and sensitive data. This issue is present in versions 0.1.0 to 0.8.1. A user is able to load the model of their choice from any UR
ive data. This issue is present in versions 0.1.0 to 0.8.1. A user is able to load the model of their choice from any URL that they would like to use. The user of TorchServe is responsible for configuring both the allowed_urls and specifying the model URL to be used. A pull request to warn the user when the default value for allowed_urls is used has been merged in PR #2534. TorchServe release 0.8.2 includes this change. Users are advised to upgrade. There are no known workarounds for this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/pytorch/serve/security/advisories/GHSA-8fxr-qfr9-p34w - https://github.com/pytorch/serve/p
erences: - https://github.com/pytorch/serve/security/advisories/GHSA-8fxr-qfr9-p34w - https://github.com/pytorch/serve/pull/2534 - https://github.com/pytorch/serve/releases/tag/v0.8.2 - http://packetstormsecurity.com/files/175095/PyTorch-Model-Server-Registration-Deserialization-Remote-Code-Execution.html
CVE ID: CVE-2023-43655 State: PUBLISHED Published: 2023-09-29T19:33:32.183Z Last Updated: 2025-06-18T13:59:58.568Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H) Vendors: composer Products: composer Problem Types: CWE-74 Description: Composer is a dependency manager for PHP. Users publishing a composer.phar to a public web-accessible server where the composer.phar can be executed as a php file may be subject to a remote code execution vulnerability if PHP also has `register_argc_argv` enabled in php.ini. Versions 2.6.4, 2.2.22 and 1.10.27 patch this vulnerability. Users are advised to upgrade. Users unable to upgrade should make sure `register_argc_argv` is disabled
s vulnerability. Users are advised to upgrade. Users unable to upgrade should make sure `register_argc_argv` is disabled in php.ini, and avoid publishing composer.phar to the web as this is not best practice. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/composer/composer/security/advisories/GHSA-jm6m-4632-36hf - https://github.com/composer/composer/commit/4fce14795aba98e40b6c4f5047305aba17a6120d - https://github.com/composer/composer/commit/955a48e6319c8962e5cd421b07c00ab3c728968c - https://github.com/composer/composer/commit/95e091c921037b7b6564942845e7b738f6b95c9c - https://lists.fedoraproject.org/archives/list/package-announc
composer/commit/95e091c921037b7b6564942845e7b738f6b95c9c - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KFOPGPW2KS37O3KJWBRGTUWHTXCQXBS2/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7AWYAUZNH565NWPIKGEIYBWHYNM5JGAE/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/66H2WKFUO255T3BZTL72TNYJYH2XM5FG/ - https://lists.debian.org/debian-lts-announce/2024/03/msg00030.html
CVE ID: CVE-2023-43656 State: PUBLISHED Published: 2023-09-27T20:38:57.460Z Last Updated: 2024-09-20T19:44:13.133Z Severity: MEDIUM (CVSS 5.6 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L) Vendors: matrix-org Products: matrix-hookshot Problem Types: CWE-74 Description: matrix-hookshot is a Matrix bot for connecting to external services like GitHub, GitLab, JIRA, and more. Instances that have enabled transformation functions (those that have `generic.allowJsTransformationFunctions` in their config), may be vulnerable to an attack where it is possible to break out of the `vm2` sandbox and as a result Hookshot will be vulnerable to this. This problem is only likely to affect users who have allow
sandbox and as a result Hookshot will be vulnerable to this. This problem is only likely to affect users who have allowed untrusted users to apply their own transformation functions. If you have only enabled a limited set of trusted users, this threat is reduced (though not eliminated). Version 4.5.0 and above of hookshot include a new sandbox library which should better protect users. Users are advised to upgrade. Users unable to upgrade should disable `generic.allowJsTransformationFunctions` in the config. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/matrix-org/matrix-hookshot/security/advisories/GHSA-fr97-pv6w-4cj6 - https:/
nrichment: References: - https://github.com/matrix-org/matrix-hookshot/security/advisories/GHSA-fr97-pv6w-4cj6 - https://github.com/matrix-org/matrix-hookshot/commit/dc126afa6af86d66aefcd23a825326f405bcc894