Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
But a possibly observable difference in timing when padding error would occur while decrypting the ciphertext makes a padding oracle and an adversary might be able to make use of that oracle to decrypt data without knowing the decryption key by issuing on average 128*b calls to the padding oracle (where b is the number of bytes in the ciphertext block). A patch was released which ensures the HMAC tag is verified before performing CBC decryption. The fixed versions are `>=3.11.4`. Users should upgrade to `^3.11.4`. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/panva/jose/security/advisories/GHSA-94hh-pjjg-rwmr - https://www.npmjs.com/package/jose-browser
es: - https://github.com/panva/jose/security/advisories/GHSA-94hh-pjjg-rwmr - https://www.npmjs.com/package/jose-browser-runtime
CVE ID: CVE-2021-29445 State: PUBLISHED Published: 2021-04-16T21:50:13 Last Updated: 2024-08-03T22:02:51.975Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: panva Products: jose-node-esm-runtime Problem Types: CWE-203 Description: jose-node-esm-runtime is an npm package which provides a number of cryptographic functions. In versions prior to 3.11.4 the AES_CBC_HMAC_SHA2 Algorithm (A128CBC-HS256, A192CBC-HS384, A256CBC-HS512) decryption would always execute both HMAC tag verification and CBC decryption, if either failed `JWEDecryptionFailed` would be thrown. But a possibly observable difference in timing when padding error would occur while decrypting the ci
` would be thrown. But a possibly observable difference in timing when padding error would occur while decrypting the ciphertext makes a padding oracle and an adversary might be able to make use of that oracle to decrypt data without knowing the decryption key by issuing on average 128*b calls to the padding oracle (where b is the number of bytes in the ciphertext block). A patch was released which ensures the HMAC tag is verified before performing CBC decryption. The fixed versions are `>=3.11.4`. Users should upgrade to `^3.11.4`. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/panva/jose/security/advisories/GHSA-4v4g-726h-xvfv - https://www.npmjs.com/pa
ontainer: References: - https://github.com/panva/jose/security/advisories/GHSA-4v4g-726h-xvfv - https://www.npmjs.com/package/jose-node-esm-runtime
CVE ID: CVE-2021-29446 State: PUBLISHED Published: 2021-04-16T22:00:15 Last Updated: 2024-08-03T22:02:51.986Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: panva Products: jose-node-cjs-runtime Problem Types: CWE-203 Description: jose-node-cjs-runtime is an npm package which provides a number of cryptographic functions. In versions prior to 3.11.4 the AES_CBC_HMAC_SHA2 Algorithm (A128CBC-HS256, A192CBC-HS384, A256CBC-HS512) decryption would always execute both HMAC tag verification and CBC decryption, if either failed `JWEDecryptionFailed` would be thrown. But a possibly observable difference in timing when padding error would occur while decrypting the ci
` would be thrown. But a possibly observable difference in timing when padding error would occur while decrypting the ciphertext makes a padding oracle and an adversary might be able to make use of that oracle to decrypt data without knowing the decryption key by issuing on average 128*b calls to the padding oracle (where b is the number of bytes in the ciphertext block). A patch was released which ensures the HMAC tag is verified before performing CBC decryption. The fixed versions are `>=3.11.4`. Users should upgrade to `^3.11.4`. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/panva/jose/security/advisories/GHSA-rvcw-f68w-8h8h - https://www.npmjs.com/pa
ontainer: References: - https://github.com/panva/jose/security/advisories/GHSA-rvcw-f68w-8h8h - https://www.npmjs.com/package/jose-node-cjs-runtime
CVE ID: CVE-2021-29447 State: PUBLISHED Published: 2021-04-15T21:10:12 Last Updated: 2024-08-03T22:02:51.924Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N) Vendors: WordPress Products: wordpress-develop Problem Types: CWE-611 Description: Wordpress is an open source CMS. A user with the ability to upload files (like an Author) can exploit an XML parsing issue in the Media Library leading to XXE attacks. This requires WordPress installation to be using PHP 8. Access to internal files is possible in a successful XXE attack. This has been patched in WordPress version 5.7.1, along with the older affected versions via a minor release. We strongly recommend you keep auto-u
rdPress version 5.7.1, along with the older affected versions via a minor release. We strongly recommend you keep auto-updates enabled. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-rv47-pc52-qrhh - https://wordpress.org/news/category/security/ - https://lists.debian.org/debian-lts-announce/2021/04/msg00017.html - https://www.debian.org/security/2021/dsa-4896 - http://packetstormsecurity.com/files/163148/XML-External-Entity-Via-MP3-File-Upload-On-WordPress.html - http://packetstormsecurity.com/files/164198/WordPress-5.7-Media-Library-XML-Injection.html - https://blog.sonarsource.com/wordpress-xxe-secur
urity.com/files/164198/WordPress-5.7-Media-Library-XML-Injection.html - https://blog.sonarsource.com/wordpress-xxe-security-vulnerability/
CVE ID: CVE-2021-29448 State: PUBLISHED Published: 2021-04-15T15:25:14 Last Updated: 2024-08-03T22:02:51.967Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H) Vendors: pi-hole Products: AdminLTE Problem Types: CWE-79 Description: Pi-hole is a Linux network-level advertisement and Internet tracker blocking application. The Stored XSS exists in the Pi-hole Admin portal, which can be exploited by the malicious actor with the network access to DNS server. See the referenced GitHub security advisory for patch details. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pi-hole/AdminLTE/security/advisories/GHSA-cwwf-93p7-73j9
CVE ID: CVE-2021-29449 State: PUBLISHED Published: 2021-04-14T22:05:17 Last Updated: 2024-08-03T22:02:51.944Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L) Vendors: pi-hole Products: pi-hole Problem Types: CWE-269 Description: Pi-hole is a Linux network-level advertisement and Internet tracker blocking application. Multiple privilege escalation vulnerabilities were discovered in version 5.2.4 of Pi-hole core. See the referenced GitHub security advisory for details. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pi-hole/pi-hole/security/advisories/GHSA-3597-244c-wrpj - https://www.compass-security.com/fileadmin/Research/Advisorie
/pi-hole/pi-hole/security/advisories/GHSA-3597-244c-wrpj - https://www.compass-security.com/fileadmin/Research/Advisories/2021-02_CSNC-2021-008_Pi-hole_Privilege_Escalation.txt - http://packetstormsecurity.com/files/163715/Pi-Hole-Remove-Commands-Linux-Privilege-Escalation.html
CVE ID: CVE-2021-29450 State: PUBLISHED Published: 2021-04-15T21:20:10 Last Updated: 2024-08-03T22:02:51.863Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: WordPress Products: wordpress-develop Problem Types: CWE-200 Description: Wordpress is an open source CMS. One of the blocks in the WordPress editor can be exploited in a way that exposes password-protected posts and pages. This requires at least contributor privileges. This has been patched in WordPress 5.7.1, along with the older affected versions via minor releases. It's strongly recommended that you keep auto-updates enabled to receive the fix. Additional Analyst Notes: - CVE Program Container: Refe
commended that you keep auto-updates enabled to receive the fix. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/news/category/security/ - https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-pmmh-2f36-wvhq - https://lists.debian.org/debian-lts-announce/2021/04/msg00017.html - https://www.debian.org/security/2021/dsa-4896
CVE ID: CVE-2021-29451 State: PUBLISHED Published: 2021-04-16T21:40:13 Last Updated: 2024-08-03T22:02:51.928Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: ManyDesigns Products: Portofino Problem Types: CWE-347 Description: Portofino is an open source web development framework. Portofino before version 5.2.1 did not properly verify the signature of JSON Web Tokens. This allows forging a valid JWT. The issue will be patched in the upcoming 5.2.1 release. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ManyDesigns/Portofino/security/advisories/GHSA-6g3c-2mh5-7q6x - https://github.com/ManyDesigns/Portofino/commit/8c754a0a
ManyDesigns/Portofino/security/advisories/GHSA-6g3c-2mh5-7q6x - https://github.com/ManyDesigns/Portofino/commit/8c754a0ad234555e813dcbf9e57d637f9f23d8fb - https://mvnrepository.com/artifact/com.manydesigns/portofino
CVE ID: CVE-2021-29452 State: PUBLISHED Published: 2021-04-16T21:35:15 Last Updated: 2024-08-03T22:02:51.935Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: curveball Products: a12n-server Problem Types: CWE-269 Description: a12n-server is an npm package which aims to provide a simple authentication system. A new HAL-Form was added to allow editing users in version 0.18.0. This feature should only have been accessible to admins. Unfortunately, privileges were incorrectly checked allowing any logged in user to make this change. Patched in v0.18.2. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/curveball/a12n-server/security
18.2. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/curveball/a12n-server/security/advisories/GHSA-8hw9-22v6-9jr9 - https://www.npmjs.com/package/%40curveball/a12n-server
CVE ID: CVE-2021-29453 State: PUBLISHED Published: 2021-04-19T18:55:13 Last Updated: 2024-08-03T22:02:51.980Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H) Vendors: turt2live Products: matrix-media-repo Problem Types: CWE-400 Description: matrix-media-repo is an open-source multi-domain media repository for Matrix. Versions 1.2.6 and earlier of matrix-media-repo do not properly handle malicious images which are crafted to be small in file size, but large in complexity. A malicious user could upload a relatively small image in terms of file size, using particular image formats, which expands to have extremely large dimensions during the process of thumbnailing. The
sing particular image formats, which expands to have extremely large dimensions during the process of thumbnailing. The server can be exhausted of memory in the process of trying to load the whole image into memory for thumbnailing, leading to denial of service. Version 1.2.7 has a fix for the vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/turt2live/matrix-media-repo/security/advisories/GHSA-j889-h476-hh9h - https://hub.docker.com/r/turt2live/matrix-media-repo/tags?page=1&ordering=last_updated - https://github.com/turt2live/matrix-media-repo/releases/tag/v1.2.7
CVE ID: CVE-2021-29454 State: PUBLISHED Published: 2022-01-10T00:00:00.000Z Last Updated: 2025-04-23T19:14:05.629Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N) Vendors: smarty-php Products: smarty Problem Types: CWE-74 Description: Smarty is a template engine for PHP, facilitating the separation of presentation (HTML/CSS) from application logic. Prior to versions 3.1.42 and 4.0.2, template authors could run arbitrary PHP code by crafting a malicious math string. If a math string was passed through as user provided data to the math function, external users could run arbitrary PHP code by crafting a malicious math string. Users should upgrade to version 3.1.42 or 4.0.
l users could run arbitrary PHP code by crafting a malicious math string. Users should upgrade to version 3.1.42 or 4.0.2 to receive a patch. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/smarty-php/smarty/security/advisories/GHSA-29gp-2c3m-3j6m - https://github.com/smarty-php/smarty/commit/215d81a9fa3cd63d82fb3ab56ecaf97cf1e7db71 - https://github.com/smarty-php/smarty/releases/tag/v3.1.42 - https://github.com/smarty-php/smarty/releases/tag/v4.0.2 - https://packagist.org/packages/smarty/smarty - https://www.smarty.net/docs/en/language.function.math.tpl - https://lists.debian.org/debian-lts-announce/2022/05/msg00005.html - https:/
ty.net/docs/en/language.function.math.tpl - https://lists.debian.org/debian-lts-announce/2022/05/msg00005.html - https://www.debian.org/security/2022/dsa-5151 - https://security.gentoo.org/glsa/202209-09 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L777JIBIWJV34HS7LXPIDWASG7TT4LNI/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BRAJVDRGCIY5UZ2PQHKDTT7RMKG6WJQQ/
CVE ID: CVE-2021-29455 State: PUBLISHED Published: 2021-04-19T19:05:15 Last Updated: 2024-08-03T22:02:51.935Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: grassrootza Products: grassroot-platform Problem Types: CWE-347 Description: Grassroot Platform is an application to make it faster, cheaper and easier to persistently organize and mobilize people in low-income communities. Grassroot Platform before master deployment as of 2021-04-16 did not properly verify the signature of JSON Web Tokens when refreshing an existing JWT. This allows to forge a valid JWT. The problem has been patched in version 1.3.1 by deprecating the JWT refresh function, which was an o
forge a valid JWT. The problem has been patched in version 1.3.1 by deprecating the JWT refresh function, which was an overdue deprecation regardless (the "refresh" flow is no longer used). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/grassrootza/grassroot-platform/security/advisories/GHSA-f65w-6xw8-6734 - https://github.com/grassrootza/grassroot-platform/ - https://github.com/grassrootza/grassroot-platform/commit/a2e6e885f8183a066d938cf909fd813a7af7d67f
CVE ID: CVE-2021-29456 State: PUBLISHED Published: 2021-04-21T18:50:14 Last Updated: 2024-08-03T22:02:51.933Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N) Vendors: authelia Products: authelia Problem Types: CWE-601 Description: Authelia is an open-source authentication and authorization server providing 2-factor authentication and single sign-on (SSO) for your applications via a web portal. In versions 4.27.4 and earlier, utilizing a HTTP query parameter an attacker is able to redirect users from the web application to any domain, including potentially malicious sites. This security issue does not directly impact the security of the web application itself. As a wo
tially malicious sites. This security issue does not directly impact the security of the web application itself. As a workaround, one can use a reverse proxy to strip the query parameter from the affected endpoint. There is a patch for version 4.28.0. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/authelia/authelia/security/advisories/GHSA-36f2-fcrx-fp4j
CVE ID: CVE-2021-29457 State: PUBLISHED Published: 2021-04-19T00:00:00 Last Updated: 2024-08-03T22:02:51.923Z Vendors: Exiv2 Products: exiv2 Problem Types: CWE-122 Description: Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. A heap buffer overflow was found in Exiv2 versions v0.27.3 and earlier. The heap overflow is triggered when Exiv2 is used to write metadata into a crafted image file. An attacker could potentially exploit the vulnerability to gain code execution, if they can trick the victim into running Exiv2 on a crafted image file. Note that this bug is only triggered when _writing_ the metadata, which is a les
running Exiv2 on a crafted image file. Note that this bug is only triggered when _writing_ the metadata, which is a less frequently used Exiv2 operation than _reading_ the metadata. For example, to trigger the bug in the Exiv2 command-line application, you need to add an extra command-line argument such as `insert`. The bug is fixed in version v0.27.4. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Exiv2/exiv2/issues/1529 - https://github.com/Exiv2/exiv2/security/advisories/GHSA-v74w-h496-cgqm - https://github.com/Exiv2/exiv2/pull/1534 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2XQT5F5IINTDYDAFGVGQZ
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2XQT5F5IINTDYDAFGVGQZ7PMMLG7I5ZZ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P2A5GMJEXQ5Q76JK6F6VKK5JYCLVFGKN/ - https://www.debian.org/security/2021/dsa-4958 - https://lists.debian.org/debian-lts-announce/2021/08/msg00028.html - https://security.gentoo.org/glsa/202312-06
CVE ID: CVE-2021-29458 State: PUBLISHED Published: 2021-04-19T00:00:00 Last Updated: 2024-08-03T22:02:51.987Z Vendors: Exiv2 Products: exiv2 Problem Types: CWE-125 Description: Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in Exiv2 versions v0.27.3 and earlier. The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted image file. An attacker could potentially exploit the vulnerability to cause a denial of service by crashing Exiv2, if they can trick the victim into running Exiv2 on a crafted image file. Note that this bug is only triggered when writing th
ey can trick the victim into running Exiv2 on a crafted image file. Note that this bug is only triggered when writing the metadata, which is a less frequently used Exiv2 operation than reading the metadata. For example, to trigger the bug in the Exiv2 command-line application, you need to add an extra command-line argument such as insert. The bug is fixed in version v0.27.4. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Exiv2/exiv2/issues/1530 - https://github.com/Exiv2/exiv2/security/advisories/GHSA-57jj-75fm-9rq5 - https://github.com/Exiv2/exiv2/pull/1536 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message
Exiv2/exiv2/pull/1536 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2XQT5F5IINTDYDAFGVGQZ7PMMLG7I5ZZ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P2A5GMJEXQ5Q76JK6F6VKK5JYCLVFGKN/ - https://lists.debian.org/debian-lts-announce/2023/01/msg00004.html - https://security.gentoo.org/glsa/202312-06
CVE ID: CVE-2021-29459 State: PUBLISHED Published: 2021-04-20T18:30:22 Last Updated: 2024-08-03T22:02:51.994Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L) Vendors: xwiki Products: xwiki-platform Problem Types: CWE-79 Description: XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It is possible to persistently inject scripts in XWiki versions prior to 12.6.3 and 12.8. Unregistred users can fill simple text fields. Registered users can fill in their personal information and (if they have edit rights) fill the values of static lists using App Within Minutes. There is no easy workaround except upgrading XWiki. T
rights) fill the values of static lists using App Within Minutes. There is no easy workaround except upgrading XWiki. The vulnerability has been patched on XWiki 12.8 and 12.6.3. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-5c66-v29h-xjh8
CVE ID: CVE-2021-29460 State: PUBLISHED Published: 2021-04-27T20:10:13 Last Updated: 2024-08-03T22:02:51.975Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N) Vendors: getkirby Products: kirby Problem Types: CWE-79 Description: Kirby is an open source CMS. An editor with write access to the Kirby Panel can upload an SVG file that contains harmful content like `<script>` tags. The direct link to that file can be sent to other users or visitors of the site. If the victim opens that link in a browser where they are logged in to Kirby, the script will run and can for example trigger requests to Kirby's API with the permissions of the victim. This vulnerability is critical i
and can for example trigger requests to Kirby's API with the permissions of the victim. This vulnerability is critical if you might have potential attackers in your group of authenticated Panel users, as they can escalate their privileges if they get access to the Panel session of an admin user. Depending on your site, other JavaScript-powered attacks are possible. Visitors without Panel access can only use this attack vector if your site allows SVG file uploads in frontend forms and you don't already sanitize uploaded SVG files. The problem has been patched in Kirby 3.5.4. Please update to this or a later version to fix the vulnerability. Frontend upload forms need to be patched separately
Please update to this or a later version to fix the vulnerability. Frontend upload forms need to be patched separately depending on how they store the uploaded file(s). If you use `File::create()`, you are protected by updating to 3.5.4+. As a work around you can disable the upload of SVG files in your file blueprints. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/getkirby/kirby/security/advisories/GHSA-qgp4-5qx6-548g - https://github.com/getkirby/kirby/releases/tag/3.5.4 - http://packetstormsecurity.com/files/162359/Kirby-CMS-3.5.3.1-Cross-Site-Scripting.html
CVE ID: CVE-2021-29461 State: PUBLISHED Published: 2021-04-20T19:45:18 Last Updated: 2024-08-03T22:02:51.928Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: DEMON1A Products: Discord-Recon Problem Types: CWE-94 Description: Discord Recon Server is a bot that allows one to do one's reconnaissance process from one's Discord. A vulnerability in Discord Recon Server prior to 0.0.3 could be exploited to read internal files from the system and write files into the system resulting in remote code execution. This issue has been fixed in version 0.0.3. As a workaround, one may copy the code from `assets/CommandInjection.py` in the Discord Recon Server code repository
3. As a workaround, one may copy the code from `assets/CommandInjection.py` in the Discord Recon Server code repository and overwrite vulnerable code from one's own Discord Recon Server implementation with code that contains the patch. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/DEMON1A/Discord-Recon/security/advisories/GHSA-3m9v-v33c-g83x
CVE ID: CVE-2021-29462 State: PUBLISHED Published: 2021-04-20T21:10:13 Last Updated: 2024-08-03T22:02:51.945Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L) Vendors: pupnp Products: pupnp Problem Types: CWE-20 Description: The Portable SDK for UPnP Devices is an SDK for development of UPnP device and control point applications. The server part of pupnp (libupnp) appears to be vulnerable to DNS rebinding attacks because it does not check the value of the `Host` header. This can be mitigated by using DNS revolvers which block DNS-rebinding attacks. The vulnerability is fixed in version 1.14.6 and later. Additional Analyst Notes: - CVE Program Container: References: - ht
vulnerability is fixed in version 1.14.6 and later. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pupnp/pupnp/security/advisories/GHSA-6hqq-w3jq-9fhg - http://www.openwall.com/lists/oss-security/2021/04/20/4