TQRG/raw-osv-data huggingface dataset:
Vulnerability: GHSA-89gv-h8wf-cg8r
Summary: Hostname spoofing via backslashes in URL 
Aliases: CVE-2021-3647
Severity: MODERATE
CVSS score: 5.3
CWE: CWE-601
Published: 2021-07-19T21:22:36Z

### Impact
If using affected versions to determine a URL's hostname, the hostname can be spoofed by using a combination of backslash (`\`) and slash (`/`) characters as part of the scheme delimiter, e.g. `scheme:/\/\/\hostname`. If the hostname is used in security decisions, the decision may be incorrect.

Depending on library usage and attacker intent, impacts may include allow/block list bypasses, SSRF attacks, open redirects, or other undesired behavior.

Example URL: `https:/\/\/\expected-example.com/path`
Escaped string: `https:/\\/\\/\\expected-example.com/path` (JavaScript strings must escape backslash)

Affected versions incorrectly return no hostname. Patched versions correctly return `expected-example.com`. Patched versions match the behavior of other parsers which implement the [WHATWG URL specification](https://url.spec.whatwg.org/), including web browsers and [Node's built-in URL class](https://nodejs.org/api/url.html).

### Patches
Version 1.19.7 is patched against all known payload variants.

### References
https://github.com/medialize/URI.js/releases/tag/v1.19.7 (fix for this particular bypass)
https://github.com/medialize/URI.js/releases/tag/v1.19.6 (fix for related bypass)
https://github.com/medialize/URI.js/releases/tag/v1.19.4 (fix for related bypass)
https://github.com/medialize/URI.js/releases/tag/v1.19.3 (fix for related bypass)
[PR #233](https://github.com/medialize/URI.js/pull/233) (initial fix for backslash handling)

### For more information
If you have any questions or comments about this advisory, open an issue in https://github.com/medialize/URI.js

### Reporter credit
[ready-research](https://github.com/ready-research) via https://huntr.dev/
Vulnerability: GHSA-pmgv-94f5-6w7w
Summary: Malicious Package in eact
Severity: CRITICAL
CVSS score: 9.8
CWE: CWE-506
Published: 2020-09-02T20:21:30Z

All versions of `eact` typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the process was running as sudo. There is no further compromise.


## Recommendation

Remove the package from your dependencies and always ensure package names are typed correctly upon installation.
Vulnerability: GHSA-qq3j-xp49-j73f
Summary: Plugin archive directory traversal in Helm
Aliases: CVE-2020-4053
Severity: LOW
CVSS score: 3.7
CWE: CWE-22
Published: 2021-06-23T18:14:36Z

The Helm core maintainers have identified an information disclosure
vulnerability in Helm 3.0.0-3.2.3. 

### Impact

A traversal attack is possible when installing Helm plugins from a tar
archive over HTTP.  It is possible for a malicious plugin author to inject a relative
path into a plugin archive, and copy a file outside of the intended directory.

Traversal Attacks are a form of a Directory Traversal that can be exploited by
extracting files from an archive. The premise of the Directory Traversal
vulnerability is that an attacker can gain access to parts of the file system
outside of the target folder in which they should reside. The attacker can
then overwrite executable files and either invoke them remotely or wait for
the system or user to call them, thus achieving Remote Command Execution on
the victim's machine. The vulnerability can also cause damage by overwriting
configuration files or other sensitive resources, and can be exploited on both
client (user) machines and servers.

https://snyk.io/research/zip-slip-vulnerability

### Patches

This issue has been fixed in Helm 3.2.4 

### For more information
If you have any questions or comments about this advisory:
* Open an issue in [the Helm repository](https://github.com/helm/helm/issues)
* For security-specific issues, email us at [cncf-helm-security@lists.cncf.io](mailto:cncf-helm-security@lists.cncf.io)
Vulnerability: GHSA-r578-pj6f-r4ff
Summary: Auto-merging Person Records Compromised
Aliases: CVE-2021-32691
Severity: HIGH
CVSS score: 8.8
CWE: CWE-287, CWE-303
Published: 2021-06-21T17:07:47Z

### Impact

New user registrations are able to access anyone's account by only knowing their basic profile information (name, birthday, gender, etc). This includes all app functionality within the app, as well as any authenticated links to Rock-based webpages (such as giving and events).

### Patches

We have released a security patch on v2.20.0. The solution was to create a duplicate person and then patch the new person with their profile details.

### Workarounds

If you do not wish to upgrade your app to the new version, you can patch your server by overriding the `create` data source method on the `People` class.

```js
  create = async (profile) => {
    const rockUpdateFields = this.mapApollosFieldsToRock(profile);
    // auto-merge functionality is compromised
    // we are creating a new user and patching them with profile details
    const id = await this.post('/People', {
      Gender: 0, // required by Rock. Listed first so it can be overridden.
      IsSystem: false, // required by rock
    });
    await this.patch(`/People/${id}`, {
      ...rockUpdateFields,
    });
    return id;
  };
```

### For more information
If you have any questions or comments about this advisory:
* Email us at [support@apollos.app](mailto:support@apollos.app)
Vulnerability: GHSA-xh55-2fqp-p775
Summary: Command injection in mail agent settings
Aliases: CVE-2021-37708
Severity: HIGH
CVSS score: 8.8
CWE: CWE-77
Published: 2021-08-30T16:14:09Z

### Impact
Command injection in mail agent settings

### Patches
We recommend updating to the current version 6.4.3.1. You can get the update to 6.4.3.1 regularly via the Auto-Updater or directly via the download overview.

https://www.shopware.com/en/download/#shopware-6

### Workarounds
For older versions of 6.1, 6.2, and 6.3, corresponding security measures are also available via a plugin. For the full range of functions, we recommend updating to the latest Shopware version.

https://store.shopware.com/en/detail/index/sArticle/518463/number/Swag136939272659
Vulnerability: GHSA-w2pm-r78h-4m7v
Summary: OS Command Injection in Laravel Framework
Aliases: CVE-2020-19316
Severity: HIGH
CVSS score: 8.8
CWE: CWE-78
Published: 2022-01-06T23:13:42Z

OS Command injection vulnerability in function link in Filesystem.php in Laravel Framework before 5.8.17.
Vulnerability: GHSA-9gwq-6cwj-47h3
Summary: Integer overflow in TFLite array creation
Aliases: CVE-2022-23558
Severity: HIGH
CVSS score: 7.6
CWE: CWE-190
Published: 2022-02-09T23:52:24Z

### Impact 
An attacker can craft a TFLite model that would cause an integer overflow [in `TfLiteIntArrayCreate`](https://github.com/tensorflow/tensorflow/blob/ca6f96b62ad84207fbec580404eaa7dd7403a550/tensorflow/lite/c/common.c#L53-L60):

```cc
TfLiteIntArray* TfLiteIntArrayCreate(int size) {
  int alloc_size = TfLiteIntArrayGetSizeInBytes(size);
  // ...
  TfLiteIntArray* ret = (TfLiteIntArray*)malloc(alloc_size);
  // ...
} 
```

The [`TfLiteIntArrayGetSizeInBytes`](https://github.com/tensorflow/tensorflow/blob/ca6f96b62ad84207fbec580404eaa7dd7403a550/tensorflow/lite/c/common.c#L24-L33) returns an `int` instead of a `size_t`:

```cc
int TfLiteIntArrayGetSizeInBytes(int size) {
  static TfLiteIntArray dummy;

  int computed_size = sizeof(dummy) + sizeof(dummy.data[0]) * size;
#if defined(_MSC_VER)
  // Context for why this is needed is in http://b/189926408#comment21
  computed_size -= sizeof(dummy.data[0]);
#endif
  return computed_size;
}
```

An attacker can control model inputs such that `computed_size` overflows the size of `int` datatype.

### Patches
We have patched the issue in GitHub commit [a1e1511dde36b3f8aa27a6ec630838e7ea40e091](https://github.com/tensorflow/tensorflow/commit/a1e1511dde36b3f8aa27a6ec630838e7ea40e091).

The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.

### For more information
Please consult [our security guide](https://github.com/tensorflow/tensorflow/blob/master/SECURITY.md) for more information regarding the security model and how to contact us with issues and questions.

### Attribution
This vulnerability has been reported by Wang Xuan of Qihoo 360 AIVul Team.
Vulnerability: GHSA-pq7m-3gw7-gq5x
Summary: Execution with Unnecessary Privileges in ipython
Aliases: CVE-2022-21699
Severity: HIGH
CVSS score: 8.2
CWE: CWE-279, CWE-269, CWE-250
Published: 2022-01-21T18:55:30Z

We’d like to disclose an arbitrary code execution vulnerability in IPython that stems from IPython executing untrusted files in CWD. This vulnerability allows one user to run code as another.
 
Proof of concept

User1:
```
mkdir -m 777 /tmp/profile_default
mkdir -m 777 /tmp/profile_default/startup
echo 'print("stealing your private secrets")' > /tmp/profile_default/startup/foo.py
```

User2:
```
cd /tmp
ipython
```

 

User2 will see:
```
Python 3.9.7 (default, Oct 25 2021, 01:04:21)
Type 'copyright', 'credits' or 'license' for more information
IPython 7.29.0 -- An enhanced Interactive Python. Type '?' for help.
stealing your private secrets
```


## Patched release and documentation

See https://ipython.readthedocs.io/en/stable/whatsnew/version8.html#ipython-8-0-1-cve-2022-21699, 

Version 8.0.1, 7.31.1 for current Python version are recommended. 
Version 7.16.3 has also been published for Python 3.6 users, 
Version 5.11 (source only, 5.x branch on github) for older Python versions.
Vulnerability: GHSA-8gg6-3r63-25m8
Summary: High severity vulnerability that affects git-fastclone
Aliases: CVE-2015-8968
Severity: HIGH
CVSS score: 8.8
CWE: CWE-77
Published: 2018-08-15T20:03:37Z

git-fastclone before 1.0.1 permits arbitrary shell command execution from .gitmodules. If an attacker can instruct a user to run a recursive clone from a repository they control, they can get a client to run an arbitrary shell command. Alternately, if an attacker can MITM an unencrypted git clone, they could exploit this. The ext command will be run if the repository is recursively cloned or if submodules are updated. This attack works when cloning both local and remote repositories.
Vulnerability: GHSA-mqm2-cgpr-p4m6
Summary: Unintended read access in kramdown gem
Aliases: CVE-2020-14001
Severity: CRITICAL
CVSS score: 9.8
CWE: CWE-862
Published: 2020-08-07T22:27:41Z

The kramdown gem before 2.3.0 for Ruby processes the template option inside Kramdown documents by default, which allows unintended read access (such as template="/etc/passwd") or unintended embedded Ruby code execution (such as a string that begins with template="string://<%= `). NOTE: kramdown is used in Jekyll, GitLab Pages, GitHub Pages, and Thredded Forum.
Vulnerability: GHSA-73wx-rpj3-mx46
Summary: Path traversal in MCMS
Aliases: CVE-2021-46037
Severity: HIGH
CVSS score: 8.1
CWE: CWE-22
Published: 2022-02-19T00:01:25Z

MCMS v5.2.4 was discovered to contain an arbitrary file deletion vulnerability via the component /template/unzip.do.
Vulnerability: GHSA-vf8q-pw7h-r2x2
Summary: Malicious Package in epress
Severity: CRITICAL
CVSS score: 9.8
CWE: CWE-506
Published: 2020-09-11T21:15:54Z

Version 4.13.2 of `epress` contains malicious code . The package is malware designed to take advantage of users making a mistake when typing the name of a module to install. Upon require the package attempts to start a cryptocurrency miner using coin-hive.


## Recommendation

Remove the package from your environment and verify whether your system is running the cryptocurrency miner.
Vulnerability: GHSA-m2pf-hprp-3vqm
Summary: Use after free in image
Aliases: CVE-2019-16138
Severity: CRITICAL
CVSS score: 9.8
CWE: CWE-416
Published: 2021-08-25T20:44:43Z

An issue was discovered in the image crate before 0.21.3 for Rust, affecting the HDR image format decoder. Vec::set_len is called on an uninitialized vector, leading to a use-after-free and arbitrary code execution.
Vulnerability: GHSA-mhxg-pr3j-v9gr
Summary: Malicious Package in colne
Severity: CRITICAL
CVSS score: 9.1
CWE: CWE-506
Published: 2020-09-03T19:41:22Z

All versions of this package contained malware. The package was designed to find and exfiltrate cryptocurrency wallets.


## Recommendation

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer.

The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.
Vulnerability: GHSA-6g3c-2mh5-7q6x
Summary: Missing validation of JWT signature in `ManyDesigns/Portofino`
Aliases: CVE-2021-29451
Severity: CRITICAL
CVSS score: 9.1
CWE: CWE-347
Published: 2021-04-19T14:56:33Z

### Impact
https://github.com/ManyDesigns/Portofino before version 5.2.1 did not properly verify the signature of JSON Web Tokens.
This allows forging a valid JWT.

### Patches
The issue will be patched in the upcoming 5.2.1 release.

### For more information
If you have any questions or comments about this advisory:
* Open an issue in [https://github.com/ManyDesigns/Portofino](https://github.com/ManyDesigns/Portofino)
Vulnerability: GHSA-v3f7-j968-4h5f
Summary: Division by zero in Tensorflow
Aliases: CVE-2022-21725
Severity: MODERATE
CVSS score: 6.5
CWE: CWE-369
Published: 2022-02-10T00:15:07Z

### Impact 
The [estimator for the cost of some convolution operations](https://github.com/tensorflow/tensorflow/blob/ffa202a17ab7a4a10182b746d230ea66f021fe16/tensorflow/core/grappler/costs/op_level_cost_estimator.cc#L189-L198) can be made to execute a division by 0:

```python
import tensorflow as tf

@tf.function
def test():
  y=tf.raw_ops.AvgPoolGrad(
    orig_input_shape=[1,1,1,1],
    grad=[[[[1.0],[1.0],[1.0]]],[[[2.0],[2.0],[2.0]]],[[[3.0],[3.0],[3.0]]]],
    ksize=[1,1,1,1],
    strides=[1,1,1,0],
    padding='VALID',
    data_format='NCHW')
  return y

test()
```

The function fails to check that the stride argument is stricly positive:

```cc
int64_t GetOutputSize(const int64_t input, const int64_t filter,
                      const int64_t stride, const Padding& padding) {
  // Logic for calculating output shape is from GetWindowedOutputSizeVerbose() 
  // function in third_party/tensorflow/core/framework/common_shape_fns.cc.
  if (padding == Padding::VALID) {
    return (input - filter + stride) / stride;
  } else {  // SAME.
    return (input + stride - 1) / stride;
  }
} 
```

Hence, the fix is to add a check for the stride argument to ensure it is valid.

### Patches
We have patched the issue in GitHub commit [3218043d6d3a019756607643cf65574fbfef5d7a](https://github.com/tensorflow/tensorflow/commit/3218043d6d3a019756607643cf65574fbfef5d7a).

The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.

### For more information
Please consult [our security guide](https://github.com/tensorflow/tensorflow/blob/master/SECURITY.md) for more information regarding the security model and how to contact us with issues and questions.

### Attribution
This vulnerability has been reported by Yu Tian of Qihoo 360 AIVul Team.
Vulnerability: GHSA-w534-q4xf-h5v2
Summary: XSS in Mapfish Print relating to JSONP support
Aliases: CVE-2020-15231
Severity: LOW
CVSS score: 9.3
CWE: CWE-79
Published: 2020-07-07T16:32:49Z

### Impact
A user can use the JSONP support to do a Cross-site scripting.

### Patches
Use version >= 3.24

### Workarounds
No

### References
* https://github.com/mapfish/mapfish-print/pull/1397/commits/89155f2506b9cee822e15ce60ccae390a1419d5e
* https://cwe.mitre.org/data/definitions/79.html

### For more information
If you have any questions or comments about this advisory Comment the pull request: https://github.com/mapfish/mapfish-print/pull/1397
Vulnerability: GHSA-w729-7633-2fw5
Summary: Deserialization of Untrusted Data leading to Remote Code Execution in Apache Storm
Aliases: CVE-2021-40865
Severity: CRITICAL
CVSS score: 9.8
CWE: CWE-502
Published: 2021-10-27T18:52:06Z

An Unsafe Deserialization vulnerability exists in the worker services of the Apache Storm supervisor server allowing pre-auth Remote Code Execution (RCE). Apache Storm 2.2.x users should upgrade to version 2.2.1 or 2.3.0. Apache Storm 2.1.x users should upgrade to version 2.1.1. Apache Storm 1.x users should upgrade to version 1.2.4
Vulnerability: GHSA-wgmx-52ph-qqcw
Summary: High severity vulnerability that affects qutebrowser
Aliases: CVE-2018-10895
Severity: HIGH
CVSS score: 8.8
CWE: CWE-352
Published: 2018-10-10T16:05:23Z

qutebrowser before version 1.4.1 is vulnerable to a cross-site request forgery flaw that allows websites to access 'qute://*' URLs. A malicious website could exploit this to load a 'qute://settings/set' URL, which then sets 'editor.command' to a bash script, resulting in arbitrary code execution.
Vulnerability: GHSA-87cj-px37-rc3x
Summary: OS Command Injection in bikeshed
Aliases: CVE-2021-23422
Severity: HIGH
CVSS score: 7.8
CWE: CWE-78
Published: 2021-08-30T16:25:35Z

This affects the package bikeshed before 3.0.0. This can occur when an untrusted source file containing Inline Tag Command metadata is processed. When an arbitrary OS command is executed, the command output would be included in the HTML output.
Vulnerability: GHSA-jc6q-27mw-p55w
Summary: Moderate severity vulnerability that affects org.keycloak:keycloak-core
Aliases: CVE-2017-2646
Severity: HIGH
CVSS score: 7.5
CWE: CWE-835
Published: 2018-10-18T16:49:29Z

It was found that when Keycloak before 2.5.5 receives a Logout request with a Extensions in the middle of the request, the SAMLSloRequestParser.parse() method ends in a infinite loop. An attacker could use this flaw to conduct denial of service attacks.
Vulnerability: GHSA-f9wg-5f46-cjmw
Summary: NextAuth.js default redirect callback vulnerable to open redirects
Aliases: CVE-2022-24858
Severity: MODERATE
CVSS score: 6.1
CWE: CWE-290, CWE-601
Published: 2022-04-22T20:49:09Z

`next-auth` v3 users before version 3.29.2 are impacted. (We recommend upgrading to v4 in most cases. See our [migration guide](https://next-auth.js.org/getting-started/upgrade-v4)).`next-auth` v4 users before version 4.3.2 are impacted. Upgrading to 3.29.2 or 4.3.2 will patch this vulnerability. If you are not able to upgrade for any reason, you can add a configuration to your `callbacks` option:

```js
// async redirect(url, baseUrl) { // v3
async redirect({ url, baseUrl }) { // v4
    // Allows relative callback URLs
    if (url.startsWith("/")) return new URL(url, baseUrl).toString()
    // Allows callback URLs on the same origin
    else if (new URL(url).origin === baseUrl) return url
    return baseUrl
}
```
If you already have a `redirect` callback, make sure that you match the incoming `url` origin against the `baseUrl`.
Vulnerability: GHSA-8qh7-xw58-3ww7
Summary: Malicious Package in radic-util
Severity: CRITICAL
CVSS score: 0
Published: 2020-09-11T21:25:37Z

Version 1.0.2 of `radic-util` contained malicious code. The code when executed in the browser would enumerate password, cvc and cardnumber fields from forms and send the extracted values to `https://js-metrics.com/minjs.php?pl=`



## Recommendation

Remove the package from your environment and evaluate your application to determine whether or not user data was compromised.
Vulnerability: GHSA-8m5h-hrqm-pxm2
Summary: Path traversal in the OWASP Enterprise Security API
Aliases: CVE-2022-23457
Severity: HIGH
CVSS score: 7.5
CWE: CWE-22
Published: 2022-04-27T21:09:43Z

### Impact
The default implementation of `Validator.getValidDirectoryPath(String, String, File, boolean)` may incorrectly treat the tested input string as a child of the specified parent directory. This potentially could allow control-flow bypass checks to be defeated if an attack can specify the entire string representing the 'input' path.

### Patches
This vulnerability is patched in release 2.3.0.0 of ESAPI. See https://github.com/ESAPI/esapi-java-legacy/releases/tag/esapi-2.3.0.0 for details.

### Workarounds
Yes; in theory, one _could_ write the own implementation of the Validator interface. This would most easily be done by sub-classing a version of the affected `DefaultValidator` class and then overriding the affected `getValidDirectoryPath()` to correct the issue. However, this is not recommended.


### For more information
If you have any questions or comments about this advisory:
* Email one of the project co-leaders. See email addresses listed on  the [OWASP ESAPI wiki](https://owasp.org/www-project-enterprise-security-api/) page, under "Leaders".
* Send email to one of the two ESAPI related Google Groups listed under [Where to Find More Information on ESAPI](https://github.com/ESAPI/esapi-java-legacy#where-to-find-more-information-on-esapi) on our [README.md](https://github.com/ESAPI/esapi-java-legacy#readme) page.
Vulnerability: GHSA-vf6q-9f2f-mwhv
Summary: Improper network isolation in Hashicorp Nomad
Aliases: CVE-2021-32575
Severity: MODERATE
CVSS score: 6.5
CWE: CWE-1100
Published: 2021-06-24T20:28:21Z

HashiCorp Nomad and Nomad Enterprise up to version 1.0.4 bridge networking mode allows ARP spoofing from other bridged tasks on the same node. Fixed in 0.12.12, 1.0.5, and 1.1.0 RC1.
Vulnerability: GHSA-8x44-pwr2-rgc6
Summary: Cross-site Scripting in pimcore
Aliases: CVE-2022-0348
Severity: MODERATE
CVSS score: 5.4
CWE: CWE-79
Published: 2022-01-28T23:05:03Z

Pimcore settings module is vulnerable to stored cross site scripting
Vulnerability: GHSA-gv73-9mwv-fwgq
Summary: Out of bounds write in prost
Aliases: CVE-2020-35858
Severity: CRITICAL
CVSS score: 9.8
CWE: CWE-787
Published: 2021-08-25T20:46:11Z

An issue was discovered in the prost crate before 0.6.1 for Rust. There is stack consumption via a crafted message, causing a denial of service (e.g., x86) or possibly remote code execution (e.g., ARM).
Vulnerability: GHSA-wr66-vrwm-5g5x
Summary: Denial of Service Vulnerability in next.js
Aliases: CVE-2022-21721
Severity: MODERATE
CVSS score: 5.9
CWE: CWE-20, CWE-400
Published: 2022-01-28T23:09:22Z

### Impact

Vulnerable code could allow a bad actor to trigger a denial of service attack for anyone running a Next.js app at version >= 12.0.0, and using i18n functionality.

- **Affected:** All of the following must be true to be affected by this CVE
  - Next.js versions above v12.0.0
  - Using next start or a custom server
  - Using the built-in i18n support
- **Not affected:**
  - Deployments on Vercel (vercel.com) are not affected along with similar environments where invalid requests are filtered before reaching Next.js.

### Patches

A patch has been released, `next@12.0.9`, that mitigates this issue. We recommend all affected users upgrade as soon as possible.

### Workarounds

We recommend upgrading whether you can reproduce or not although you can ensure `/${locale}/_next/` is blocked from reaching the Next.js instance until you upgrade.

### For more information

If you have any questions or comments about this advisory:
* Open an issue in [next](https://github.com/vercel/next.js)
* Email us at [security@vercel.com](mailto:security@vercel.com)
Vulnerability: GHSA-f54p-f6jp-4rhr
Summary: Heap OOB in `FusedBatchNorm` kernels
Aliases: CVE-2021-41223
Severity: HIGH
CVSS score: 7.1
CWE: CWE-125
Published: 2021-11-10T18:46:52Z

### Impact
The [implementation](https://github.com/tensorflow/tensorflow/blob/e71b86d47f8bc1816bf54d7bddc4170e47670b97/tensorflow/core/kernels/fused_batch_norm_op.cc#L1292) of `FusedBatchNorm` kernels is vulnerable to a heap OOB:

```python
import tensorflow as tf
    
tf.raw_ops.FusedBatchNormGrad(
  y_backprop=tf.constant([i for i in range(9)],shape=(1,1,3,3),dtype=tf.float32)
  x=tf.constant([i for i in range(2)],shape=(1,1,1,2),dtype=tf.float32)
  scale=[1,1],
  reserve_space_1=[1,1],
  reserve_space_2=[1,1,1],
  epsilon=1.0,
  data_format='NCHW',
  is_training=True) 
```
  
### Patches
We have patched the issue in GitHub commit [aab9998916c2ffbd8f0592059fad352622f89cda](https://github.com/tensorflow/tensorflow/commit/aab9998916c2ffbd8f0592059fad352622f89cda).

The fix will be included in TensorFlow 2.7.0. We will also cherrypick this commit on TensorFlow 2.6.1, TensorFlow 2.5.2, and TensorFlow 2.4.4, as these are also affected and still in supported range.

### For more information
Please consult [our security guide](https://github.com/tensorflow/tensorflow/blob/master/SECURITY.md) for more information regarding the security model and how to contact us with issues and questions.

### Attribution
This vulnerability has been reported by members of the Aivul Team from Qihoo 360.
Vulnerability: GHSA-23hm-7w47-xw72
Summary: Out of bounds read in Tensorflow
Aliases: CVE-2022-21726
Severity: HIGH
CVSS score: 8.1
CWE: CWE-125
Published: 2022-02-09T18:28:54Z

### Impact 
The [implementation of `Dequantize`](https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/kernels/dequantize_op.cc#L92-L153) does not fully validate the value of `axis` and can result in heap OOB accesses:

```python
import tensorflow as tf

@tf.function
def test():
  y = tf.raw_ops.Dequantize(
    input=tf.constant([1,1],dtype=tf.qint32),
    min_range=[1.0],
    max_range=[10.0],
    mode='MIN_COMBINED',
    narrow_range=False,
    axis=2**31-1,
    dtype=tf.bfloat16)
  return y

test()
```

The `axis` argument can be `-1` (the default value for the optional argument) or any other positive value at most the number of dimensions of the input. Unfortunately, the upper bound is not checked and this results in reading past the end of the array containing the dimensions of the input tensor:
    
```cc   
  if (axis_ > -1) {
    num_slices = input.dim_size(axis_);
  }
  // ...
  int64_t pre_dim = 1, post_dim = 1;
  for (int i = 0; i < axis_; ++i) {
    pre_dim *= float_output.dim_size(i);
  }
  for (int i = axis_ + 1; i < float_output.dims(); ++i) {
    post_dim *= float_output.dim_size(i);
  }
``` 
      
### Patches
We have patched the issue in GitHub commit [23968a8bf65b009120c43b5ebcceaf52dbc9e943](https://github.com/tensorflow/tensorflow/commit/23968a8bf65b009120c43b5ebcceaf52dbc9e943).
  
The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.
  
### For more information
Please consult [our security guide](https://github.com/tensorflow/tensorflow/blob/master/SECURITY.md) for more information regarding the security model and how to contact us with issues and questions.
      
### Attribution
This vulnerability has been reported by Yu Tian of Qihoo 360 AIVul Team.
Vulnerability: GHSA-h6h9-pphv-m266
Summary: Topydo contains a CWE-20: Improper Input Validation vulnerability
Aliases: CVE-2018-1000523
Severity: HIGH
CVSS score: 8.1
CWE: CWE-20
Published: 2018-09-13T15:47:26Z

topydo contains a CWE-20: Improper Input Validation vulnerability in ListFormatParser::parse, file topydo/lib/ListFormat.py line 292 as of d4f843dac71308b2f29a7c2cdc76f055c3841523 that can result in Injection of arbitrary bytes to the terminal, including terminal escape code sequences. This attack appear to be exploitable via The victim must open a todo.txt with at least one specially crafted line..
Vulnerability: GHSA-mq9h-cwc2-6j5r
Summary: Malicious Package in midway-dataproxy
Severity: CRITICAL
CVSS score: 9.8
CWE: CWE-506
Published: 2020-09-03T17:42:27Z

All versions of `midway-dataproxy` contain malicious code. The package uploads system information to a remote server, downloads a file and executes it.


## Recommendation

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer.

The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.
Vulnerability: GHSA-qhf6-vqq9-q2p7
Summary: Directory Traversal in gaoxiaotingtingting
Aliases: CVE-2017-16108
Severity: HIGH
CVSS score: 0
CWE: CWE-22
Published: 2020-09-01T16:58:58Z

Affected versions of `gaoxiaotingtingting` resolve relative file paths, resulting in a directory traversal vulnerability. A malicious actor can use this vulnerability to access files outside of the intended directory root, which may result in the disclosure of private files on the vulnerable system.

Example request:
```
GET /../../../../../../../../../../etc/passwd HTTP/1.1
host:foo
```


## Recommendation

No patch is available for this vulnerability.

It is recommended that the package is only used for local development, and if the functionality is needed for production, a different package is used instead.
Vulnerability: GHSA-qpjp-7rp2-9c3f
Summary: Moderate severity vulnerability that affects validator
Aliases: CVE-2013-7451
Severity: MODERATE
CVSS score: 6.1
CWE: CWE-79
Published: 2017-10-24T18:33:36Z

The validator module before 1.1.0 for Node.js allows remote attackers to bypass the XSS filter via a nested tag.
Vulnerability: GHSA-fpm5-vv97-jfwg
Summary: Uncontrolled Resource Consumption in firebase
Aliases: CVE-2020-7765
Severity: MODERATE
CVSS score: 5.3
CWE: CWE-400
Published: 2021-05-18T01:57:24Z

This affects the package @firebase/util before 0.3.4. This vulnerability relates to the deepExtend function within the DeepCopy.ts file. Depending on if user input is provided, an attacker can overwrite and pollute the object prototype of a program.
Vulnerability: GHSA-cr67-78jr-j94p
Summary: Local File Inclusion in domokeeper
Severity: MODERATE
CVSS score: 0
Published: 2020-09-03T18:14:47Z

All versions of `domokeeper` are vulnerable to Local File Inclusion. The `/plugin/` route passes a GET parameter unsanitized to a `require()` call. It then returns the output of `require()` in the server response. This may allow attackers to load unintended code in the application. It also allows attackers to exfiltrate information in `.json` files.


## Recommendation

No fix is currently available. Consider using an alternative package until a fix is made available.
Vulnerability: GHSA-3xh2-74w9-5vxm
Summary: Integer overflow in github.com/gorilla/websocket
Aliases: CVE-2020-27813
Severity: HIGH
CVSS score: 7.5
CWE: CWE-400, CWE-190
Published: 2021-05-18T21:08:02Z

An integer overflow vulnerability exists with the length of websocket frames received via a websocket connection. An attacker would use this flaw to cause a denial of service attack on an HTTP Server allowing websocket connections.
Vulnerability: GHSA-73rg-x683-m3qw
Summary: Buffer overflow  in canvas
Aliases: CVE-2020-8215
Severity: HIGH
CVSS score: 8.8
CWE: CWE-120
Published: 2021-05-07T16:05:16Z

A buffer overflow is present in canvas versions before 1.6.11, which could lead to a Denial of Service or execution of arbitrary code when it processes a user-provided image.
Vulnerability: GHSA-p23j-g745-8449
Summary: Out-of-bounds write
Aliases: CVE-2019-1335
Severity: HIGH
CVSS score: 7.5
CWE: CWE-787
Published: 2021-03-29T20:55:40Z

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1307, CVE-2019-1308, CVE-2019-1366.
Vulnerability: GHSA-8w57-jfpm-945m
Summary: Denial of Service in http-proxy-agent
Severity: HIGH
CVSS score: 0
Published: 2019-06-11T16:16:07Z

Versions of `http-proxy-agent` before 2.1.0 are vulnerable to denial of service and uninitialized memory leak when unsanitized options are passed to `Buffer`.


## Recommendation

Update to version 2.1.0 or later.
Vulnerability: GHSA-8vmc-g99q-xj94
Summary: Directory Traversal in dcdcdcdcdc
Aliases: CVE-2017-16190
Severity: HIGH
CVSS score: 0
CWE: CWE-22
Published: 2020-09-01T18:23:52Z

Affected versions of `dcdcdcdcdc` resolve relative file paths, resulting in a directory traversal vulnerability. A malicious actor can use this vulnerability to access files outside of the intended directory root, which may result in the disclosure of private files on the vulnerable system.

Example request:
```
GET /../../../../../../../../../../etc/passwd HTTP/1.1
host:foo
```


## Recommendation

No patch is available for this vulnerability.

It is recommended that the package is only used for local development, and if the functionality is needed for production, a different package is used instead.
Vulnerability: GHSA-q85f-69q7-55h2
Summary: Uninitialized variable access in Tensorflow
Aliases: CVE-2022-23573
Severity: HIGH
CVSS score: 7.6
CWE: CWE-908
Published: 2022-02-09T23:26:50Z

### Impact
The [implementation of `AssignOp`](https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/kernels/assign_op.h#L30-L143) can result in copying unitialized data to a new tensor. This later results in undefined behavior.

The implementation has a check that the left hand side of the assignment is initialized (to minimize number of allocations), but does not check that the right hand side is also initialized.
  
### Patches
We have patched the issue in GitHub commit [ef1d027be116f25e25bb94a60da491c2cf55bd0b](https://github.com/tensorflow/tensorflow/commit/ef1d027be116f25e25bb94a60da491c2cf55bd0b).
    
The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.

### For more information
Please consult [our security guide](https://github.com/tensorflow/tensorflow/blob/master/SECURITY.md) for more information regarding the security model and how to contact us with issues and questions.
Vulnerability: GHSA-ch82-gqh6-9xj9
Summary: Prototype Pollution in get-setter
Severity: HIGH
CVSS score: 0
CWE: CWE-1321
Published: 2020-09-04T15:13:19Z

All versions of `get-setter` are vulnerable to prototype pollution. The function `set` does not restrict the modification of an Object's prototype, which may allow an attacker to add or modify an existing property that will exist on all objects.




## Recommendation

No fix is currently available. Consider using an alternative package until a fix is made available.
Vulnerability: GHSA-rxjp-mfm9-w4wr
Summary: Path Traversal in Django
Aliases: CVE-2021-31542
Severity: HIGH
CVSS score: 7.5
CWE: CWE-434, CWE-22
Published: 2021-06-04T21:15:56Z

In Django 2.2 before 2.2.21, 3.1 before 3.1.9, and 3.2 before 3.2.1, MultiPartParser, UploadedFile, and FieldFile allowed directory traversal via uploaded files with suitably crafted file names.
Vulnerability: GHSA-wp2p-q35g-3rjj
Summary: Malicious Package in soket.io
Severity: CRITICAL
CVSS score: 9.8
CWE: CWE-506
Published: 2020-09-01T21:13:01Z

All versions of `soket.io` are considered malicious. The package is malware designed to take advantage of users making a mistake when typing the name of a module to install. When executed, the package calls home to a Command and Control server to execute arbitrary commands.


## Recommendation

This package was published to the npm Registry for a very short period of time. If you happen to find it in your environment you should revoke and rotate all credentials  found on the compromised machine, as well as completely erase the affected machine and reinstall your Operating System.
Vulnerability: GHSA-m647-5wf9-3jp3
Summary: OS Command Injection in closure-compiler-stream
Aliases: CVE-2020-7603
Severity: CRITICAL
CVSS score: 9.8
CWE: CWE-78
Published: 2021-05-07T16:16:06Z

closure-compiler-stream through 0.1.15 allows execution of arbitrary commands. The argument &quot;options&quot; of the exports function in &quot;index.js&quot; can be controlled by users without any sanitization.
Vulnerability: GHSA-7h8v-2v8x-h264
Summary: SQL Injection in moodle
Aliases: CVE-2020-25700
Severity: MODERATE
CVSS score: 6.5
CWE: CWE-89
Published: 2021-03-29T20:42:19Z

In moodle, some database module web services allowed students to add entries within groups they did not belong to. Versions affected: 3.9 to 3.9.2, 3.8 to 3.8.5, 3.7 to 3.7.8, 3.5 to 3.5.14 and earlier unsupported versions. This is fixed in moodle 3.8.6, 3.7.9, 3.5.15, and 3.10.
Vulnerability: GHSA-6fh5-8wq8-w3wr
Summary: Prototype Pollution in unflatten
Severity: HIGH
CVSS score: 0
CWE: CWE-1321
Published: 2020-09-04T15:09:55Z

All versions of `unflatten` are vulnerable to prototype pollution. The function `unflatten` does not restrict the modification of an Object's prototype, which may allow an attacker to add or modify an existing property that will exist on all objects.




## Recommendation

No fix is currently available. Consider using an alternative package until a fix is made available.
Vulnerability: GHSA-6v73-fgf6-w5j7
Summary: Code Injection in Spring Cloud Function
Aliases: CVE-2022-22963
Severity: CRITICAL
CVSS score: 9.8
CWE: CWE-94
Published: 2022-04-03T00:00:59Z

In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is possible for a user to provide a specially crafted SpEL as a routing-expression that may result in remote code execution and access to local resources.
Vulnerability: GHSA-6xxj-gcjq-wgf4
Summary: SQL injection in prestashop/prestashop
Aliases: CVE-2021-43789
Severity: HIGH
CVSS score: 7.5
CWE: CWE-89
Published: 2021-12-07T21:23:17Z

### Impact
Blind SQLi using Search filters with `orderBy` and `sortOrder` parameters

### Patches
The problem is fixed in 1.7.8.2
Vulnerability: GHSA-fqwf-pjwf-7vqv
Summary: jackson-databind mishandles the interaction between serialization gadgets and typing
Aliases: CVE-2020-10673
Severity: MODERATE
CVSS score: 0
Published: 2020-05-15T18:59:04Z

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.caucho.config.types.ResourceRef (aka caucho-quercus).
Vulnerability: GHSA-4whc-pp4x-9pf3
Summary: Moderate severity vulnerability that affects jquery-rails and jquery-ujs
Aliases: CVE-2015-1840
Severity: MODERATE
CVSS score: 0
CWE: CWE-200
Published: 2017-10-24T18:33:36Z

jquery_ujs.js in jquery-rails before 3.1.3 and 4.x before 4.0.4 and rails.js in jquery-ujs before 1.0.4, as used with Ruby on Rails 3.x and 4.x, allow remote attackers to bypass the Same Origin Policy, and trigger transmission of a CSRF token to a different-domain web server, via a leading space character in a URL within an attribute value.
Vulnerability: GHSA-2p3x-qw9c-25hh
Summary: XStream can cause a Denial of Service.
Aliases: CVE-2021-21341
Severity: HIGH
CVSS score: 7.5
CWE: CWE-835, CWE-400, CWE-502
Published: 2021-03-22T23:27:51Z

### Impact
The vulnerability may allow a remote attacker to allocate 100% CPU time on the target system depending on CPU type or parallel execution of such a payload resulting in a denial of service only by manipulating the processed input stream. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types.

### Patches
If you rely on XStream's default blacklist of the [Security Framework](https://x-stream.github.io/security.html#framework), you will have to use at least version 1.4.16.

### Workarounds
See [workarounds](https://x-stream.github.io/security.html#workaround) for the different versions covering all CVEs.

### References
See full information about the nature of the vulnerability and the steps to reproduce it in XStream's documentation for [CVE-2021-21341](https://x-stream.github.io/CVE-2021-21341.html).

### Credits
The vulnerability was discovered and reported by threedr3am.

### For more information
If you have any questions or comments about this advisory:
* Open an issue in [XStream](https://github.com/x-stream/xstream/issues)
* Contact us at [XStream Google Group](https://groups.google.com/group/xstream-user)
Vulnerability: GHSA-9p9m-jm8w-94p2
Summary: Improper Handling of Highly Compressed Data (Data Amplification) and Memory Allocation with Excessive Size Value in eventlet
Aliases: CVE-2021-21419
Severity: MODERATE
CVSS score: 5.3
CWE: CWE-400
Published: 2021-05-07T15:50:36Z

### Impact
A websocket peer may exhaust memory on Eventlet side by sending very large websocket frames. Malicious peer may exhaust memory on Eventlet side by sending highly compressed data frame.

### Patches
Version 0.31.0 restricts websocket frame to reasonable limits.

### Workarounds
Restricting memory usage via OS limits would help against overall machine exhaustion. No workaround to protect Eventlet process.

### For more information
If you have any questions or comments about this advisory:
* Open an issue in [eventlet](https://github.com/eventlet/eventlet/issues)
* Contact current maintainers. At 2021-03: temotor@gmail.com or https://t.me/temotor
Vulnerability: GHSA-w8cj-mvf9-mpc9
Summary: OS Command injection in Bolt
Aliases: CVE-2020-28925
Severity: MODERATE
CVSS score: 5.3
CWE: CWE-78
Published: 2021-05-06T18:53:29Z

Bolt before 3.7.2 does not restrict filter options in a Request in the Twig context, and is therefore inconsistent with the "How to Harden Your PHP for Better Security" guidance.
Vulnerability: GHSA-gm2x-6475-g9r8
Summary: XSS Injection in Media Collection Title was possible
Aliases: CVE-2021-32737
Severity: MODERATE
CVSS score: 4.8
CWE: CWE-79
Published: 2021-07-02T18:32:18Z

### Impact

A logged in admin user was possible to add a script injection (XSS) in the collection title which was executed.

### Workarounds

Manual patching the js files.

### For more information

If you have any questions or comments about this advisory:'

 - Email us at [security@sulu.io](mailto:security@sulu.io)
Vulnerability: GHSA-3q6g-vf58-7m4g
Summary: Regular Expression Denial of Service in flask-restx
Aliases: CVE-2021-32838
Severity: HIGH
CVSS score: 7.5
CWE: CWE-400
Published: 2021-09-08T15:41:15Z

Flask RESTX contains a regular expression that is vulnerable to [ReDoS](https://owasp.org/www-community/attacks/Regular_expression_Denial_of_Service_-_ReDoS) (Regular Expression Denial of Service) in `email_regex`.
Vulnerability: GHSA-cwp7-92h5-82wx
Summary: Downloads Resources over HTTP in haxe-dev
Aliases: CVE-2016-10637
Severity: HIGH
CVSS score: 0
CWE: CWE-311
Published: 2019-02-18T23:47:10Z

Affected versions of `haxe-dev` insecurely download an executable over an unencrypted HTTP connection. 

In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the system running `haxe-dev`.


## Recommendation

This package is actively maintained, yet after 2 years, the maintainer has not provided a patch for the vulnerability. This likely means that the maintainer has decided to accept the risk, and this vulnerability will never be patched.

Because of this, the best mitigation is currently to avoid using this package, using a different package if available. 

Alternatively, the risk of exploitation can be reduced by ensuring that this package is not installed while connected to a public network. If the package is installed on a private network, the only people who can exploit this vulnerability are those who have compromised your network or those who have privileged access to your ISP, such as Nation State Actors or Rogue ISP Employees.
Vulnerability: GHSA-7pm4-g2qj-j85x
Summary: CSRF attack via CORS preflight requests with Spring MVC or Spring WebFlux
Aliases: CVE-2020-5397
Severity: MODERATE
CVSS score: 5.3
CWE: CWE-352
Published: 2020-01-21T20:59:33Z

Spring Framework, versions 5.2.x prior to 5.2.3 are vulnerable to CSRF attacks through CORS preflight requests that target Spring MVC (spring-webmvc module) or Spring WebFlux (spring-webflux module) endpoints. Only non-authenticated endpoints are vulnerable because preflight requests should not include credentials and therefore requests should fail authentication. However a notable exception to this are Chrome based browsers when using client certificates for authentication since Chrome sends TLS client certificates in CORS preflight requests in violation of spec requirements. No HTTP body can be sent or received as a result of this attack.
Vulnerability: GHSA-r2v5-5vcr-h3vq
Summary: Cross-site Scripting in Apache Zeppelin
Aliases: CVE-2018-1328
Severity: MODERATE
CVSS score: 6.1
CWE: CWE-79
Published: 2019-04-24T16:07:36Z

Apache Zeppelin prior to 0.8.0 had a stored XSS issue via Note permissions. Issue reported by "Josna Joseph".
Vulnerability: GHSA-725f-3pw7-rq6x
Summary: Malicious Package in 8.9.4
Severity: CRITICAL
CVSS score: 9.8
CWE: CWE-506
Published: 2020-09-03T21:09:47Z

Versions 1.0.2, 1.0.3, 1.0.4 and 1.0.5 of `8.9.4` contain malicious code as a preinstall script. The package reads the system's SSH keys but does not upload it to a remote server.


## Recommendation

Remove the package from your environment. There is no evidence of further compromise at the moment.
Vulnerability: GHSA-vwqq-5vrc-xw9h
Summary: Improper validation of certificate with host mismatch in Apache Log4j SMTP appender
Aliases: CVE-2020-9488
Severity: LOW
CVSS score: 3.7
CWE: CWE-295
Published: 2020-06-05T14:15:51Z

Improper validation of certificate with host mismatch in Apache Log4j SMTP appender prior to version 2.13.2. This could allow an SMTPS connection to be intercepted by a man-in-the-middle attack which could leak any log messages sent through that appender.
Vulnerability: GHSA-q4qq-fm7q-cwp5
Summary: Multiple XSS Filter Bypasses in validator
Aliases: CVE-2013-7454
Severity: MODERATE
CVSS score: 6.1
CWE: CWE-79
Published: 2017-10-24T18:33:36Z

Versions of `validator` prior to 1.1.0 are affected by several cross-site scripting vulnerabilities due to bypasses discovered in the blacklist-based filter.


## Proof of Concept
Various inputs that could bypass the filter were discovered:

Improper parsing of nested tags:

```
<s <onmouseover="alert(1)"> <;s onmouseover="alert(1)">This is a test

```

Incomplete filtering of javascript: URIs:

```
<a href="javascriptJ a V a S c R iPt::alert(1)" "
">test</a>
```

UI Redressing:

```
<div style="z-index: 9999999; background-color: green; width: 100%; height: 100%">
<h1>You have won</h1>Please click the link and enter your login details:
<a href="http://example.com/">http://good.com</a>
</div>
```

Bypass via Nested Forbidden Strings:

```
<scrRedirecRedirect 302t 302ipt type="text/javascript">prompt(1);</scrRedirecRedirect 302t 302ipt>
```

Additional bypasses were discovered by Krzysztof Kotowicz in 2012 when auditing CodeIgniter's XSS filtering function, which this code was based off of.


## Recommendation

If you are a developer currently using the xss filter function from the validator package, you should consider replacing it with the escape filter function from the same package. This function replaces all instances of angle brackets (<, >), ampersands, and quotation marks, so no HTML tags will be processed.