TQRG/raw-osv-data huggingface dataset:
Vulnerability: GHSA-cf4q-4cqr-7g7w
Summary: SVG with embedded scripts can lead to cross-site scripting attacks in xml2rfc
Severity: MODERATE
CVSS score: 0
CWE: CWE-79
Published: 2022-04-22T20:25:53Z

xml2rfc allows `script` elements in SVG sources.
In HTML output having these script elements can lead to XSS attacks.

Sample XML snippet:
```
<artwork type="svg" src="data:image/svg+xml,%3Csvg viewBox='0 0 10 10' xmlns='http://www.w3.org/2000/svg'%3E%3Cscript%3E window.alert('Test Alert'); %3C/script%3E%3C/svg%3E">
</artwork>
```

### Impact
This vulnerability impacts website that publish HTML drafts and RFCs.

### Patches
This has been fixed in version [3.12.4](https://github.com/ietf-tools/xml2rfc/releases/tag/v3.12.4).

### Workarounds
If SVG source is self-contained within the XML, scraping `script` elements from SVG files.

### References
* https://developer.mozilla.org/en-US/docs/Web/SVG/Element/script

### For more information
If you have any questions or comments about this advisory:
* Open an issue in [xml2rfc](https://github.com/ietf-tools/xml2rfc/)
* Email us at [operational-vulnerability@ietf.org](mailto:operational-vulnerability@ietf.org)
* [Infrastructure and Services Vulnerability Disclosure](https://www.ietf.org/about/administration/policies-procedures/vulnerability-disclosure/)
Vulnerability: GHSA-43vf-2x6g-p2m5
Summary: Malicious Package in browserift
Severity: CRITICAL
CVSS score: 9.8
CWE: CWE-506
Published: 2020-09-02T21:33:26Z

Version 16.3.3 of `browserift` contained malicious code as a preinstall script. The package was a backdoor that opened a connection to a remote server and executed incoming commands on both Unix and Windows machines


## Recommendation

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer.

The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.
Vulnerability: GHSA-qq97-vm5h-rrhg
Summary: OCI Manifest Type Confusion Issue
Severity: LOW
CVSS score: 3
CWE: CWE-843
Published: 2022-02-08T18:53:56Z

### Impact

Systems that rely on digest equivalence for image attestations may be vulnerable to type confusion.

### Patches

Upgrade to at least `v2.8.0-beta.1`  if you are running `v2.x` release. If you use the code from the `main` branch, update at least to the commit after [b59a6f827947f9e0e67df0cfb571046de4733586](https://github.com/distribution/distribution/commit/b59a6f827947f9e0e67df0cfb571046de4733586).

### Workarounds

There is no way to work around this issue without patching.

### References

Due to [an oversight in the OCI Image Specification](https://github.com/opencontainers/image-spec/pull/411) that removed the embedded `mediaType` field from manifests, a maliciously crafted OCI Container Image can cause registry clients to parse the same image in two different ways without modifying the image’s digest by modifying the `Content-Type` header returned by a registry. This can invalidate a common pattern of relying on container image digests for equivalence.

### For more information

If you have any questions or comments about this advisory:
* Open an issue in [distribution](https://github.com/distribution/distribution) 
* Open an issue in [distribution-spec](https://github.com/opencontainers/distribution-spec) 
* Email us at [cncf-distribution-security@lists.cncf.io](mailto:cncf-distribution-security@lists.cncf.io)
Vulnerability: GHSA-j3f7-7rmc-6wqj
Summary: Improper certificate management in AWS IoT Device SDK v2
Aliases: CVE-2021-40831
Severity: MODERATE
CVSS score: 6.3
CWE: CWE-295
Published: 2021-11-24T20:35:03Z

The AWS IoT Device SDK v2 for Java, Python, C++ and Node.js appends a user supplied Certificate Authority (CA) to the root CAs instead of overriding it on macOS systems. Additionally, SNI validation is also not enabled when the CA has been “overridden”. TLS handshakes will thus succeed if the peer can be verified either from the user-supplied CA or the system’s default trust-store. Attackers with access to a host’s trust stores or are able to compromise a certificate authority already in the host's trust store (note: the attacker must also be able to spoof DNS in this case) may be able to use this issue to bypass CA pinning. An attacker could then spoof the MQTT broker, and either drop traffic and/or respond with the attacker's data, but they would not be able to forward this data on to the MQTT broker because the attacker would still need the user's private keys to authenticate against the MQTT broker. The 'aws_tls_ctx_options_override_default_trust_store_*' function within the aws-c-io submodule has been updated to address this behavior. This issue affects: Amazon Web Services AWS IoT Device SDK v2 for Java versions prior to 1.5.0 on macOS. Amazon Web Services AWS IoT Device SDK v2 for Python versions prior to 1.7.0 on macOS. Amazon Web Services AWS IoT Device SDK v2 for C++ versions prior to 1.14.0 on macOS. Amazon Web Services AWS IoT Device SDK v2 for Node.js versions prior to 1.6.0 on macOS. Amazon Web Services AWS-C-IO 0.10.7 on macOS.
Vulnerability: GHSA-j6px-jwvv-vpwq
Summary: Angular Expressions - Remote Code Execution
Aliases: CVE-2021-21277
Severity: LOW
CVSS score: 0
CWE: CWE-74
Published: 2021-02-01T15:01:26Z

### Impact

The vulnerability, reported by GoSecure Inc, allows Remote Code Execution, if you call `expressions.compile(userControlledInput)` where `userControlledInput` is text that comes from user input.

This time, the security of the package could be bypassed by using a more complex payload, using a `.constructor.constructor` technique.

* If running angular-expressions in the browser, an attacker could run any browser script when the application code calls expressions.compile(userControlledInput).
* If running angular-expressions on the server, an attacker could run any Javascript expression, thus gaining Remote Code Execution.

### Patches

Users should upgrade to version 1.1.2 of angular-expressions

### Workarounds

A temporary workaround might be either to : 

* disable user-controlled input that will be fed into angular-expressions in your application

OR

* allow only following characters in the userControlledInput : 

```js
if (/^[|a-zA-Z.0-9 :"'+-?]+$/.test(userControlledInput)) {
      var result = expressions.compile(userControlledInput);
}
else {
     result = undefined;
}
```

### References

[Removal of angular-expression sandbox](http://blog.angularjs.org/2016/09/angular-16-expression-sandbox-removal.html)

### For more information

If you have any questions or comments about this advisory:
* Open an issue in [angular-expressions](https://github.com/peerigon/angular-expressions/issues)
* [Email us](mailto:contact@javascript-ninja.fr)

### Credits 

The issue was reported by Maxime Nadeau from GoSecure, Inc.
Vulnerability: GHSA-v8g7-9qv2-j865
Summary: Malicious Package in bitcoin-osp
Severity: CRITICAL
CVSS score: 9.1
CWE: CWE-506
Published: 2020-09-04T16:38:55Z

All versions of this package contained malware. The package was designed to find and exfiltrate cryptocurrency wallets.


## Recommendation

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer.

The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.
Vulnerability: GHSA-v6gv-fg46-h89j
Summary: Sensitive Data Exposure in put
Severity: LOW
CVSS score: 0
CWE: CWE-200
Published: 2020-09-03T16:48:36Z

All versions of `put` are vulnerable to Uninitialized Memory Exposure. The package incorrectly calculates the allocated Buffer size and does not trim the bytes written, which may allow attackers to access uninitialized memory containing sensitive data. This vulnerability only affects versions of Node.js <=6.x.


## Recommendation

Upgrade your Node.js version or consider using an alternative package.
Vulnerability: GHSA-7x92-2j68-h32c
Summary: Directory Traversal in featurebook
Severity: MODERATE
CVSS score: 0
CWE: CWE-22
Published: 2020-09-01T19:03:02Z

Affected versions of `featurebook` resolve relative file paths, resulting in a directory traversal vulnerability. A malicious actor can use this vulnerability to access files outside of the intended directory root, which may result in the disclosure of private files on the vulnerable system.

The `featurebook` package is not intended to be run in production code nor to be exposed to an untrusted network.


## Proof of Concept
```
GET /../../../../../../../../../../etc/passwd HTTP/1.1
host:foo
```


## Recommendation

No direct patch is currently available.

At this time, the best mitigation is to ensure that `featurebook` is not running in production or exposed to an untrusted network.
Vulnerability: GHSA-7rq6-7gv8-c37h
Summary: Missing Authorization with Default Settings in Dashboard UI
Aliases: CVE-2021-41238
Severity: HIGH
CVSS score: 8.6
CWE: CWE-862
Published: 2021-11-03T17:30:59Z

Dashboard UI in Hangfire.Core uses authorization filters to protect it from showing sensitive data to unauthorized users. By default when no custom authorization filters specified, `LocalRequestsOnlyAuthorizationFilter` filter is being used to allow only local requests and prohibit all the remote requests to provide sensible, protected by default settings.

However due to the recent changes, in version 1.7.25 no authorization filters are used by default, allowing remote requests to succeed.

### Impact

Missing authorization when default options are used for the Dashboard UI, e.g. when no custom authorization rules are used as recommended in the [Using Dashboard](https://docs.hangfire.io/en/latest/configuration/using-dashboard.html#configuring-authorization) documentation article. 

#### Impacted

If you are using `UseHangfireDashboard` method with default `DashboardOptions.Authorization` property value, then your installation is impacted:

```csharp
app.UseHangfireDashboard(); // Impacted
app.UseHangfireDashboard("/hangfire", new DashboardOptions()); // Impacted
```

#### Not Impacted

If any other authorization filter is specified in the `DashboardOptions.Authorization` property, the you are not impacted:

```csharp
app.UseHangfireDashboard("/hangfire", new DashboardOptions
{
    Authorization = new []{ new SomeAuthorizationFilter(); } // Not impacted
});
```

### Patches

Patch is already available in version [1.7.26](https://github.com/HangfireIO/Hangfire/releases/tag/v1.7.26) and already available on NuGet.org, please see [Hangfire.Core 1.7.26](https://www.nuget.org/packages/Hangfire.Core/1.7.26). Default authorization rules now prohibit remote requests by default again by including the `LocalRequestsOnlyAuthorizationFilter` filter to the default settings. Please upgrade to the newest version in order to mitigate the issue.

### Workarounds

It is possible to fix the issue by using the `LocalRequestsOnlyAuthorizationFilter` explicitly when configuring the Dashboard UI. In this case upgrade is not required.

```csharp
// using Hangfire.Dashboard;

app.UseHangfireDashboard("/hangfire", new DashboardOptions
{
    Authorization = new []{ new LocalRequestsOnlyAuthorizationFilter(); }
});
```

### References

Original GitHub Issue: https://github.com/HangfireIO/Hangfire/issues/1958
Vulnerability: GHSA-9h36-4jf2-hx53
Summary: High severity vulnerability that affects extlib
Aliases: CVE-2013-1802
Severity: HIGH
CVSS score: 0
Published: 2017-10-24T18:33:37Z

The extlib gem 0.9.15 and earlier for Ruby does not properly restrict casts of string values, which might allow remote attackers to conduct object-injection attacks and execute arbitrary code, or cause a denial of service (memory and CPU consumption) by leveraging Action Pack support for (1) YAML type conversion or (2) Symbol type conversion, a similar vulnerability to CVE-2013-0156.
Vulnerability: GHSA-72fg-jqhx-c68p
Summary: Open Redirect in st
Aliases: CVE-2017-16224
Severity: MODERATE
CVSS score: 0
CWE: CWE-601
Published: 2018-08-06T21:33:31Z

st is a module for serving static files.

An attacker is able to craft a request that results in an `HTTP 301` (redirect) to an entirely different domain. 

A request for: `http://some.server.com//nodesecurity.org/%2e%2e` would result in a 301 to `//nodesecurity.org/%2e%2e` which most browsers treat as a proper redirect as `//` is translated into the current schema being used.

Mitigating factor: 

In order for this to work, `st` must be serving from the root of a server (`/`) rather than the typical sub directory (`/static/`) and the redirect URL will end with some form of URL encoded `..` ("%2e%2e", "%2e.", ".%2e"). 

Code example (provided by Xin Gao): 

[example.js]

```
var st = require('st') 
var http = require('http') 
http.createServer(st(process.cwd())).listen(1337)
```

```
$ curl -v http://localhost:1337//cve.mitre.com/%2e%2e
*   Trying ::1...
* TCP_NODELAY set
* Connected to localhost (::1) port 1337 (#0)
> GET //cve.mitre.com/%2e%2e HTTP/1.1
> Host: localhost:1337
> User-Agent: curl/7.54.0
> Accept: */*
>
< HTTP/1.1 301 Moved Permanently
< cache-control: public, max-age=600
< last-modified: Fri, 13 Oct 2017 22:56:33 GMT
< etag: "16777220-46488904-1507935393000"
< location: //cve.mitre.com/%2e%2e/
< Date: Fri, 13 Oct 2017 22:56:41 GMT
< Connection: keep-alive
< Content-Length: 30
<
* Connection #0 to host localhost left intact
```


## Recommendation

Update to version 1.2.2 or later.
Vulnerability: GHSA-xmjj-3c76-5w84
Summary: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in directus
Aliases: CVE-2022-24814
Severity: HIGH
CVSS score: 8.8
CWE: CWE-79
Published: 2022-04-05T18:30:15Z

### Impact

Unauthorized JavaScript can be executed by inserting an iframe into the rich text html interface that links to a file uploaded HTML file that loads another uploaded JS file in its script tag. This satisfies the regular content security policy header, which in turn allows the file to run any arbitrary JS.

### Patches

This was resolved in https://github.com/directus/directus/pull/12020 which is released in 9.7.0

### Workarounds

You can disable the live embed in the WYSIWYG by adding `{ "media_live_embeds": false }` to the _Options Overrides_ option of the Rich Text HTML interface.

### References

https://github.com/directus/directus/pull/12020

### For more information

If you have any questions or comments about this advisory:
* Open an issue in [directus/directus](https://github.com/directus/directus)
* Email us at [security@directus.io](mailto:security@directus.io)
Vulnerability: GHSA-6mrq-7r7m-hh4p
Summary: Malicious Package in hs-sha3
Severity: CRITICAL
CVSS score: 9.8
CWE: CWE-506
Published: 2020-09-03T22:52:58Z

Version 0.8.0 contained malicious code. The package targeted the Ethereum cryptocurrency and performed transactions to wallets not controlled by the user.


## Recommendation

Remove the package from your environment. Ensure no Ethereum funds were compromised.
Vulnerability: GHSA-cmwx-9m2h-x7v4
Summary: Ansible apt_key module does not properly verify key fingerprint
Aliases: CVE-2016-8614
Severity: HIGH
CVSS score: 7.5
CWE: CWE-358
Published: 2018-10-10T17:23:26Z

A flaw was found in Ansible before version 2.2.0. The apt_key module does not properly verify key fingerprints, allowing remote adversary to create an OpenPGP key which matches the short key ID and inject this key instead of the correct key.
Vulnerability: GHSA-x345-32rc-8h85
Summary: Denial of service attack via push rule patterns in matrix-synapse
Aliases: CVE-2021-29471
Severity: LOW
CVSS score: 3.7
CWE: CWE-331, CWE-400
Published: 2021-05-13T20:22:51Z

### Impact

"Push rules" can specify [conditions](https://matrix.org/docs/spec/client_server/r0.6.1#conditions) under which they will match, including `event_match`, which matches event content against a pattern including wildcards.

Certain patterns can cause very poor performance in the matching engine, leading to a denial-of-service when processing moderate length events.

### Patches

The issue is patched by https://github.com/matrix-org/synapse/commit/03318a766cac9f8b053db2214d9c332a977d226c.

### Workarounds

A potential workaround might be to prevent users from making custom push rules, by blocking such requests at a reverse-proxy.

### For more information

If you have any questions or comments about this advisory, email us at security@matrix.org.
Vulnerability: GHSA-jp32-vmm6-3vf5
Summary: Directory Traversal in Kubernetes
Aliases: CVE-2015-5305
Severity: MODERATE
CVSS score: 6.5
CWE: CWE-22
Published: 2022-02-15T01:57:18Z

Directory traversal vulnerability in Kubernetes, as used in Red Hat OpenShift Enterprise 3.0, allows attackers to write to arbitrary files via a crafted object type name, which is not properly handled before passing it to etcd.
Vulnerability: GHSA-gjxw-5w2q-7grf
Summary: Moderate severity vulnerability that affects rails
Aliases: CVE-2010-3933
Severity: MODERATE
CVSS score: 0
CWE: CWE-20
Published: 2017-10-24T18:33:38Z

Ruby on Rails 2.3.9 and 3.0.0 does not properly handle nested attributes, which allows remote attackers to modify arbitrary records by changing the names of parameters for form inputs.
Vulnerability: GHSA-j24p-r6wx-r79w
Summary: High severity vulnerability that affects thin
Aliases: CVE-2009-3287
Severity: HIGH
CVSS score: 0
CWE: CWE-20
Published: 2017-10-24T18:33:38Z

lib/thin/connection.rb in Thin web server before 1.2.4 relies on the X-Forwarded-For header to determine the IP address of the client, which allows remote attackers to spoof the IP address and hide activities via a modified X-Forwarded-For header.
Vulnerability: GHSA-jvg4-9rc2-wvcr
Summary: Generation of fake documents via public GET-call
Severity: LOW
CVSS score: 0
CWE: CWE-862
Published: 2021-02-10T02:32:07Z

### Impact
Generation of fake documents via public GET-call

### Patches
We recommend to update to the current version 6.3.5.1. You can get the update to 6.3.5.1 regularly via the Auto-Updater or directly via the download overview.

https://www.shopware.com/en/download/#shopware-6

### Workarounds
For older versions of 6.1 and 6.2, corresponding security measures are also available via a plugin. For the full range of functions, we recommend updating to the latest Shopware version.

https://store.shopware.com/en/detail/index/sArticle/518463/number/Swag136939272659

### For more information
https://docs.shopware.com/en/shopware-6-en/security-updates/security-update-02-2021
Vulnerability: GHSA-8wf2-3ggj-78q9
Summary: Improper Authentication in phpmyadmin
Aliases: CVE-2022-23807
Severity: MODERATE
CVSS score: 4.3
CWE: CWE-287
Published: 2022-01-28T22:44:40Z

An issue was discovered in phpMyAdmin 4.9 before 4.9.8 and 5.1 before 5.1.2. A valid user who is already authenticated to phpMyAdmin can manipulate their account to bypass two-factor authentication for future login instances.
Vulnerability: GHSA-9cq3-fj2h-ggj5
Summary: Vulnerability in remove function leads to arbitrary code execution via filePath parameters
Aliases: CVE-2020-36379
Severity: CRITICAL
CVSS score: 9.8
CWE: CWE-77, CWE-78
Published: 2021-11-02T15:42:31Z

Aaptjs is a node wraper for aapt. An issue was discovered in the remove function in shenzhim aaptjs 1.3.1, allows attackers to execute arbitrary code via the filePath parameters.
Vulnerability: GHSA-g8wg-cjwc-xhhp
Summary: Heap OOB in nested `tf.map_fn` with `RaggedTensor`s
Aliases: CVE-2021-37679
Severity: HIGH
CVSS score: 7.1
CWE: CWE-681, CWE-125
Published: 2021-08-25T14:41:00Z

### Impact
It is possible to nest a `tf.map_fn` within another `tf.map_fn` call. However, if the input tensor is a `RaggedTensor` and there is no function signature provided, code assumes the output is a fully specified tensor and fills output buffer with uninitialized contents from the heap:

```python
import tensorflow as tf
x = tf.ragged.constant([[1,2,3], [4,5], [6]])
t = tf.map_fn(lambda r: tf.map_fn(lambda y: r, r), x)
z = tf.ragged.constant([[[1,2,3],[1,2,3],[1,2,3]],[[4,5],[4,5]],[[6]]])
```
  
The `t` and `z` outputs should be identical, however this is not the case. The last row of `t` contains data from the heap which can be used to leak other memory information.

The bug lies in the conversion from a `Variant` tensor to a `RaggedTensor`. The [implementation](https://github.com/tensorflow/tensorflow/blob/460e000de3a83278fb00b61a16d161b1964f15f4/tensorflow/core/kernels/ragged_tensor_from_variant_op.cc#L177-L190) does not check that all inner shapes match and this results in the additional dimensions in the above example.

The same implementation can result in data loss, if input tensor is tweaked:

```python
import tensorflow as tf
x = tf.ragged.constant([[1,2], [3,4,5], [6]])
t = tf.map_fn(lambda r: tf.map_fn(lambda y: r, r), x) 
```

Here, the output tensor will only have 2 elements for each inner dimension.

### Patches
We have patched the issue in GitHub commit [4e2565483d0ffcadc719bd44893fb7f609bb5f12](https://github.com/tensorflow/tensorflow/commit/4e2565483d0ffcadc719bd44893fb7f609bb5f12).

The fix will be included in TensorFlow 2.6.0. We will also cherrypick this commit on TensorFlow 2.5.1, TensorFlow 2.4.3, and TensorFlow 2.3.4, as these are also affected and still in supported range.

### For more information
Please consult [our security guide](https://github.com/tensorflow/tensorflow/blob/master/SECURITY.md) for more information regarding the security model and how to contact us with issues and questions.

### Attribution
This vulnerability has been reported by Haris Sahovic.
Vulnerability: GHSA-4xww-6h7v-29jg
Summary: User enumeration in livehelperchat
Aliases: CVE-2022-0083
Severity: MODERATE
CVSS score: 0
CWE: CWE-209
Published: 2022-01-21T23:37:07Z

livehelperchat is vulnerable to Generation of Error Message Containing Sensitive Information. There is an observable discrepancy between errors generated for users that exist and those that do not.
Vulnerability: GHSA-9w6v-m7wp-jwg4
Summary: Http request which redirect to another hostname do not strip authorization header in @actions/http-client
Aliases: CVE-2020-11021
Severity: MODERATE
CVSS score: 6.3
CWE: CWE-200
Published: 2020-04-29T17:58:53Z

### Impact
If consumers of the http-client:
  1. make an http request with an authorization header
  2. that request leads to a redirect (302) and
  3. the redirect url redirects to another domain or hostname 

The authorization header will get passed to the other domain.

Note that since this library is for actions, the GITHUB_TOKEN that is available in actions is generated and scoped per job with [these permissions](https://help.github.com/en/actions/configuring-and-managing-workflows/authenticating-with-the-github_token#permissions-for-the-github_token).

### Patches
The problem is fixed in 1.0.8 at [npm here](https://www.npmjs.com/package/@actions/http-client).  In 1.0.8, the authorization header is stripped before making the redirected request if the hostname is different.

### Workarounds
None.

### References
https://github.com/actions/http-client/pull/27

### For more information
If you have any questions or comments about this advisory:
* Open an issue in https://github.com/actions/http-client/issues
Vulnerability: GHSA-77xq-cpvg-7xm2
Summary: Prototype pollution in @tsed/core
Aliases: CVE-2020-7748
Severity: MODERATE
CVSS score: 5.6
CWE: CWE-915
Published: 2021-05-10T19:07:56Z

"This affects the package @tsed/core before 5.65.7. This vulnerability relates to the deepExtend function which is used as part of the utils directory. Depending on if user input is provided, an attacker can overwrite and pollute the object prototype of a program."
Vulnerability: GHSA-xgpf-p52j-pf7m
Summary: XSS in CreateQueuedJobTask
Aliases: CVE-2021-27938
Severity: MODERATE
CVSS score: 0
CWE: CWE-79
Published: 2021-03-24T17:42:02Z

A vulnerability has been identified in the Silverstripe CMS 3 and 4 version of the symbiote/silverstripe-queuedjobs module. A Cross Site Scripting vulnerability allows an attacker to inject an arbitrary payload in the CreateQueuedJobTask dev task via a specially crafted URL.
Vulnerability: GHSA-c9qf-r67m-p7cg
Summary: Null pointer dereference in `CompressElement`
Aliases: CVE-2021-37637
Severity: HIGH
CVSS score: 7.7
CWE: CWE-476
Published: 2021-08-25T14:44:12Z

### Impact
It is possible to trigger a null pointer dereference in TensorFlow by passing an invalid input to `tf.raw_ops.CompressElement`:

```python
import tensorflow as tf

tf.raw_ops.CompressElement(components=[[]])
```
  
The [implementation](https://github.com/tensorflow/tensorflow/blob/47a06f40411a69c99f381495f490536972152ac0/tensorflow/core/data/compression_utils.cc#L34) was accessing the size of a buffer obtained from the return of a separate function call before validating that said buffer is valid.

### Patches
We have patched the issue in GitHub commit [5dc7f6981fdaf74c8c5be41f393df705841fb7c5](https://github.com/tensorflow/tensorflow/commit/5dc7f6981fdaf74c8c5be41f393df705841fb7c5).

The fix will be included in TensorFlow 2.6.0. We will also cherrypick this commit on TensorFlow 2.5.1, TensorFlow 2.4.3, and TensorFlow 2.3.4, as these are also affected and still in supported range.

### For more information
Please consult [our security guide](https://github.com/tensorflow/tensorflow/blob/master/SECURITY.md) for  more information regarding the security model and how to contact us with issues and questions.

### Attribution
This vulnerability has been reported by members of the Aivul Team from Qihoo 360. Concurrently, it was resolved in `master` branch as it was also discovered internally and fixed before the report was handled.
Vulnerability: GHSA-3cgf-9m6x-pwwr
Summary: Data races in rusqlite
Aliases: CVE-2020-35868
Severity: CRITICAL
CVSS score: 9.8
CWE: CWE-362
Published: 2021-08-25T20:47:50Z

An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated via UnlockNotification.
Vulnerability: GHSA-x7jg-6pwg-fx5h
Summary: HTTP Smuggling via Transfer-Encoding Header in Puma
Aliases: CVE-2020-11076
Severity: HIGH
CVSS score: 7.5
CWE: CWE-444
Published: 2020-05-22T14:55:05Z

### Impact

By using an invalid transfer-encoding header, an attacker could [smuggle an HTTP response.](https://portswigger.net/web-security/request-smuggling)

Originally reported by @ZeddYu, who has our thanks for the detailed report.

### Patches

The problem has been fixed in Puma 3.12.5 and Puma 4.3.4.

### For more information

If you have any questions or comments about this advisory:

* Open an issue in [Puma](https://github.com/puma/puma)
* See our [security policy](https://github.com/puma/puma/security/policy)
Vulnerability: GHSA-c32g-2mgr-cfq7
Summary: Out-of-bounds Write in iText
Aliases: CVE-2022-24197
Severity: MODERATE
CVSS score: 6.5
CWE: CWE-787
Published: 2022-02-02T00:01:45Z

iText v7.1.17 was discovered to contain a stack-based buffer overflow via the component ByteBuffer.append, which allows attackers to cause a Denial of Service (DoS) via a crafted PDF file.
Vulnerability: GHSA-rjvg-q57v-mjjc
Summary: XSS in Apache Airflow
Aliases: CVE-2019-12398
Severity: MODERATE
CVSS score: 4.8
CWE: CWE-79
Published: 2020-05-06T19:51:02Z

In Apache Airflow before 1.10.5 when running with the "classic" UI, a malicious admin user could edit the state of objects in the Airflow metadata database to execute arbitrary javascript on certain page views. The new "RBAC" UI is unaffected.
Vulnerability: GHSA-5wrh-4jwv-5w78
Summary: Open redirect via transitional IPv6 addresses on dual-stack networks
Aliases: CVE-2021-21392
Severity: MODERATE
CVSS score: 6.3
CWE: CWE-601
Published: 2021-04-13T15:13:08Z

### Impact
Requests to user provided domains were not restricted to external IP addresses when transitional IPv6 addresses were used. Outbound requests to federation, identity servers, when calculating the key validity for third-party invite events, sending push notifications, and generating URL previews are affected. This could cause Synapse to make requests to internal infrastructure on dual-stack networks.

### Patches
This issue is fixed by #9240.

### Workarounds
Outbound requests to the following address ranges can be blocked by a firewall, if unused for internal communication between systems:

* `::ffff/80`
* `::0000/80` (note that this IP range is considered deprecated by the IETF)
* `2002::/16` (note that this IP range is considered deprecated by the IETF)

### References
* [RFC3056](https://tools.ietf.org/html/rfc3056)
* [RFC4291](https://tools.ietf.org/html/rfc4291)
Vulnerability: GHSA-v543-gqhh-6gww
Summary: Moderate severity vulnerability that affects activemodel
Severity: MODERATE
CVSS score: 0
Published: 2018-09-17T21:55:43Z

Withdrawn, accidental duplicate publish.

Active Model in Ruby on Rails 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 supports the use of instance-level writers for class accessors, which allows remote attackers to bypass intended validation steps via crafted parameters.
Vulnerability: GHSA-gff7-g5r8-mg8m
Summary: Prototype Pollution in simple-plist
Aliases: CVE-2022-26260
Severity: CRITICAL
CVSS score: 9.8
CWE: CWE-1321
Published: 2022-03-23T00:00:22Z

simple-plist v1.3.0 was discovered to contain a prototype pollution vulnerability via .parse().
Vulnerability: GHSA-xv7x-x6wr-xx7g
Summary: Moderate severity vulnerability that affects org.apache.ranger:ranger
Aliases: CVE-2016-8746
Severity: MODERATE
CVSS score: 5.9
CWE: CWE-426
Published: 2018-10-17T17:22:05Z

Apache Ranger before 0.6.3 policy engine incorrectly matches paths in certain conditions when policy does not contain wildcards and has recursion flag set to true.
Vulnerability: GHSA-2w8q-69fh-9gq6
Summary: Malicious Package in bufger-xor
Severity: CRITICAL
CVSS score: 9.8
CWE: CWE-506
Published: 2020-09-03T22:25:09Z

Version 2.0.2 contained malicious code. The package targeted the Ethereum cryptocurrency and performed transactions to wallets not controlled by the user.


## Recommendation

Remove the package from your environment. Ensure no Ethereum funds were compromised.
Vulnerability: GHSA-pgcq-h79j-2f69
Summary: Incomplete validation of shapes in multiple TF ops
Aliases: CVE-2021-41206
Severity: HIGH
CVSS score: 7
CWE: CWE-354
Published: 2021-11-10T19:03:38Z

### Impact
Several TensorFlow operations are missing validation for the shapes of the tensor arguments involved in the call. Depending on the API, this can result in undefined behavior and segfault or `CHECK`-fail related crashes but in some scenarios writes and reads from heap populated arrays are also possible.

We have discovered these issues internally via tooling while working on improving/testing GPU op determinism. As such, we don't have reproducers and there will be multiple fixes for these issues.

### Patches
We have patched the issue in GitHub commits [68422b215e618df5ad375bcdc6d2052e9fd3080a](https://github.com/tensorflow/tensorflow/commit/68422b215e618df5ad375bcdc6d2052e9fd3080a), [4d74d8a00b07441cba090a02e0dd9ed385145bf4](https://github.com/tensorflow/tensorflow/commit/4d74d8a00b07441cba090a02e0dd9ed385145bf4), [579261dcd446385831fe4f7457d802a59685121d](https://github.com/tensorflow/tensorflow/commit/579261dcd446385831fe4f7457d802a59685121d), [da4aad5946be30e5f049920fa076e1f7ef021261](https://github.com/tensorflow/tensorflow/commit/da4aad5946be30e5f049920fa076e1f7ef021261), [4dddb2fd0b01cdd196101afbba6518658a2c9e07](https://github.com/tensorflow/tensorflow/commit/4dddb2fd0b01cdd196101afbba6518658a2c9e07), and [e7f497570abb6b4ae5af4970620cd880e4c0c904](https://github.com/tensorflow/tensorflow/commit/e7f497570abb6b4ae5af4970620cd880e4c0c904).

These fixes will be included in TensorFlow 2.7.0. We will also cherrypick these commits on TensorFlow 2.6.1, TensorFlow 2.5.2, and TensorFlow 2.4.4, as these are also affected and still in supported range.

### For more information
Please consult [our security guide](https://github.com/tensorflow/tensorflow/blob/master/SECURITY.md) for more information regarding the security model and how to contact us with issues and questions.
Vulnerability: GHSA-3m3h-v9hv-9j4h
Summary: Cross-site Scripting in django-wiki
Aliases: CVE-2021-25986
Severity: MODERATE
CVSS score: 5.4
CWE: CWE-79
Published: 2021-12-02T17:49:40Z

In Django-wiki, versions 0.0.20 to 0.7.8 are vulnerable to Stored Cross-Site Scripting (XSS) in Notifications Section. An attacker who has access to edit pages can inject JavaScript payload in the title field. When a victim gets a notification regarding the changes made in the application, the payload in the notification panel renders and loads external JavaScript.
Vulnerability: GHSA-jxm5-5xcw-h57q
Summary: Moderate severity vulnerability that affects org.exist-db:exist-core
Aliases: CVE-2018-1000823
Severity: CRITICAL
CVSS score: 10
CWE: CWE-611
Published: 2018-12-20T22:02:17Z

exist version <= 5.0.0-RC4 contains a XML External Entity (XXE) vulnerability in XML Parser for REST Server that can result in Disclosure of confidential data, denial of service, SSRF, port scanning.
Vulnerability: GHSA-57wx-m983-2f88
Summary: Incomplete validation in boosted trees code
Aliases: CVE-2021-41208
Severity: CRITICAL
CVSS score: 9.3
CWE: CWE-476, CWE-824
Published: 2021-11-10T19:37:56Z

### Impact
The [code for boosted trees in TensorFlow](https://github.com/tensorflow/tensorflow/blob/e0b6e58c328059829c3eb968136f17aa72b6c876/tensorflow/core/kernels/boosted_trees/stats_ops.cc) is still missing validation. As a result, attackers can trigger denial of service (via dereferencing `nullptr`s or via `CHECK`-failures) as well as abuse undefined behavior (binding references to `nullptr`s). An attacker can also read and write from heap buffers, depending on the API that gets used and the arguments that are passed to the call.

**Note**: Given that the boosted trees implementation in TensorFlow is unmaintained, it is recommend to no longer use these APIs.  Instead, please use the downstream [TensorFlow Decision Forests](https://github.com/tensorflow/decision-forests) project which is newer and supports more features. We will deprecate TensorFlow's boosted trees APIs in subsequent releases.

### Patches
We have patched the issue in GitHub commit [5c8c9a8bfe750f9743d0c859bae112060b216f5c](https://github.com/tensorflow/tensorflow/commit/5c8c9a8bfe750f9743d0c859bae112060b216f5c).

The fix will be included in TensorFlow 2.7.0. We will also cherrypick this commit on TensorFlow 2.6.1, TensorFlow 2.5.2, and TensorFlow 2.4.4, as these are also affected and still in supported range.

### For more information
Please consult [our security guide](https://github.com/tensorflow/tensorflow/blob/master/SECURITY.md) for more information regarding the security model and how to contact us with issues and questions.

### Attribution
This vulnerability has been reported by members of the Aivul Team from Qihoo 360.
Vulnerability: GHSA-rcvx-rmvf-mxch
Summary: Cross-site Scripting in Eclipse Hawkbit
Aliases: CVE-2020-27219
Severity: MODERATE
CVSS score: 6.1
CWE: CWE-79
Published: 2022-02-09T22:19:44Z

In all version of Eclipse Hawkbit prior to 0.3.0M7, the HTTP 404 (Not Found) JSON response body returned by the REST API may contain unsafe characters within the path attribute. Sending a POST request to a non existing resource will return the full path from the given URL unescaped to the client.
Vulnerability: GHSA-qwp9-52h8-xgg8
Summary: Prototype pollution in JointJS
Aliases: CVE-2020-28480
Severity: HIGH
CVSS score: 0
CWE: CWE-400
Published: 2021-01-20T21:21:16Z

The package jointjs before 3.3.0 are vulnerable to Prototype Pollution via util.setByPath (https://resources.jointjs.com/docs/jointjs/v3.2/joint.htmlutil.setByPath). The path used the access the object's key and set the value is not properly sanitized, leading to a Prototype Pollution.
Vulnerability: GHSA-jphg-qwrw-7w9g
Summary: Unsafe object creation in json RubyGem
Aliases: CVE-2020-10663
Severity: HIGH
CVSS score: 7.5
CWE: CWE-20
Published: 2020-07-27T18:08:21Z

The JSON gem through 2.2.0 for Ruby, as used in Ruby 2.4 through 2.4.9, 2.5 through 2.5.7, and 2.6 through 2.6.5, has an Unsafe Object Creation Vulnerability. This is quite similar to CVE-2013-0269/GHSA-x457-cw4h-hq5f, but does not rely on poor garbage-collection behavior within Ruby. Specifically, use of JSON parsing methods can lead to creation of a malicious object within the interpreter, with adverse effects that are application-dependent.
Vulnerability: GHSA-gfjr-xqhm-qvv3
Summary: Malicious Package in aysnc
Severity: CRITICAL
CVSS score: 9.8
CWE: CWE-506
Published: 2020-09-02T20:16:09Z

All versions of `aysnc` typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the process was running as sudo. There is no further compromise.


## Recommendation

Remove the package from your dependencies and always ensure package names are typed correctly upon installation.
Vulnerability: GHSA-cgc7-mwp4-3ccx
Summary: Cross-site Scripting in Joplin
Aliases: CVE-2020-15930
Severity: MODERATE
CVSS score: 6.1
CWE: CWE-79
Published: 2021-05-07T16:29:05Z

An XSS issue in Joplin desktop 1.0.190 to 1.0.245 allows arbitrary code execution via a malicious HTML embed tag.
Vulnerability: GHSA-x55w-vjjp-222r
Summary: Inefficient Regular Expression in inflect
Aliases: CVE-2021-3820
Severity: MODERATE
CVSS score: 5.3
CWE: CWE-400, CWE-697, CWE-1333
Published: 2021-09-29T17:12:19Z

inflect is customizable inflections for nodejs. inflect is vulnerable to Inefficient Regular Expression Complexity
Vulnerability: GHSA-q34h-97wf-8r8j
Summary: vault-cli contains possible RCE when reading user-defined data
Aliases: CVE-2021-43837
Severity: HIGH
CVSS score: 8.4
CWE: CWE-74
Published: 2021-12-16T21:02:12Z

### Impact
_What kind of vulnerability is it? Who is impacted?_

vault-cli features the ability for rendering templated values (as explained in the [documentation](https://github.com/peopledoc/vault-cli/blob/2.2.1/docs/howto/templated_secrets.rst)). When a secret starts with the prefix `!template!`, vault-cli interprets the rest of the contents of the secret as a Jinja2 template.
Jinja2 is a powerful templating engine and it's not designed to safely render arbitrary templates. An attacker controlling a jinja2 template rendered on a machine can trigger arbitrary code, making this a Remote Code Execution (RCE) risk.
If the content of the vault can be completely trusted, then this is not a problem. Otherwise, if your threat model includes cases where an attacker can manipulate a secret value read from the vault using vault-cli, then this vulnerability may impact you.

This does not impact `vault` itself, except for the fact that the attacker, having an RCE on the machine that executes `vault-cli`, may abuse the token that `vault-cli` uses, to read, write or delete other data from the vault.

### Patches
_Has the problem been patched? What versions should users upgrade to?_

In 3.0.0, the code related to interpreting vault templated secrets has been removed entirely.

### Workarounds
_Is there a way for users to fix or remediate the vulnerability without upgrading?_

Using the environment variable `VAULT_CLI_RENDER=false` or the flag `--no-render` (placed between `vault-cli` and the subcommand, e.g. `vault-cli --no-render get-all`) or adding `render: false` to the vault-cli configuration yaml file disables rendering and removes the vulnerability.
Using the python library, you can use: `vault_cli.get_client(render=False)` when creating your client to get a client that will not render templated secrets and thus operates securely.

### References
_Are there any links users can visit to find out more?_

Here's an article explaining how jinja2 templates might be exploited to have side effects: https://podalirius.net/en/publications/grehack-2021-optimizing-ssti-payloads-for-jinja2/

### For more information
If you have any questions or comments about this advisory:
* Open an issue in [the vault-cli repo](https://github.com/peopledoc/vault-cli/issues/new)
Vulnerability: GHSA-w5rh-j4g3-jr29
Summary: Missing Authorization in Jenkins S3 publisher Plugin
Aliases: CVE-2021-21651
Severity: MODERATE
CVSS score: 4.3
CWE: CWE-862
Published: 2021-06-16T17:29:17Z

Jenkins S3 publisher Plugin 0.11.6 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to obtain the list of configured profiles.
Vulnerability: GHSA-4v6p-cxf9-98rf
Summary: Allocation of Resources Without Limits or Throttling in metadata-extractor
Aliases: CVE-2022-24614
Severity: MODERATE
CVSS score: 5.5
CWE: CWE-770
Published: 2022-02-25T00:01:05Z

When reading a specially crafted JPEG file, metadata-extractor up to 2.16.0 can be made to allocate large amounts of memory that finally leads to an out-of-memory error even for very small inputs. This could be used to mount a denial of service attack against services that use metadata-extractor library.
Vulnerability: GHSA-3mf3-2gv9-h39j
Summary: Uninitialized buffer use in marc
Aliases: CVE-2021-26308
Severity: HIGH
CVSS score: 7.5
CWE: CWE-908
Published: 2021-08-25T20:53:14Z

An issue was discovered in the marc crate before 2.0.0 for Rust. A user-provided Read implementation can gain access to the old contents of newly allocated memory, violating soundness.
Vulnerability: GHSA-6j89-jhpr-849f
Summary: Out-of-bounds write
Aliases: CVE-2019-1307
Severity: HIGH
CVSS score: 7.5
CWE: CWE-787
Published: 2021-03-29T20:55:46Z

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1308, CVE-2019-1335, CVE-2019-1366.
Vulnerability: GHSA-vqqv-v9m2-48p2
Summary: Critical severity vulnerability that affects bootstrap-sass
Aliases: CVE-2019-10842
Severity: CRITICAL
CVSS score: 9.8
CWE: CWE-94
Published: 2019-04-04T16:28:47Z

Arbitrary code execution (via backdoor code) was discovered in bootstrap-sass 3.2.0.3, when downloaded from rubygems.org. An unauthenticated attacker can craft the ___cfduid cookie value with base64 arbitrary code to be executed via eval(), which can be leveraged to execute arbitrary code on the target system. Note that there are three underscore characters in the cookie name. This is unrelated to the __cfduid cookie that is legitimately used by Cloudflare.
Vulnerability: GHSA-395w-qhqr-9fr6
Summary: Path Traversal in Apache Flink
Aliases: CVE-2020-17519
Severity: MODERATE
CVSS score: 0
CWE: CWE-552, CWE-22
Published: 2021-01-06T20:01:34Z

A change introduced in Apache Flink 1.11.0 (and released in 1.11.1 and 1.11.2 as well) allows attackers to read any file on the local filesystem of the JobManager through the REST interface of the JobManager process. Access is restricted to files accessible by the JobManager process. All users should upgrade to Flink 1.11.3 or 1.12.0 if their Flink instance(s) are exposed. The issue was fixed in commit b561010b0ee741543c3953306037f00d7a9f0801 from apache/flink:master.
Vulnerability: GHSA-59qg-grp7-5r73
Summary: Weave Net clusters susceptible to MitM attacks via IPv6 rogue router advertisements
Aliases: CVE-2020-11091
Severity: MODERATE
CVSS score: 5.8
CWE: CWE-350
Published: 2021-05-27T19:00:08Z

### Impact
An attacker able to run a process as root in a container is able to respond to DNS requests from the host and thereby insert themselves as a fake service.

In a cluster with an IPv4 internal network, if IPv6 is not totally disabled on the host (via ipv6.disable=1 on the kernel cmdline), it will be either unconfigured or configured on some interfaces, but it’s pretty likely that ipv6 forwarding is disabled, ie /proc/sys/net/ipv6/conf//forwarding == 0. Also by default, /proc/sys/net/ipv6/conf//accept_ra == 1. The combination of these 2 sysctls means that the host accepts router advertisements and configure the IPv6 stack using them.

By sending “rogue” router advertisements, an attacker can reconfigure the host to redirect part or all of the IPv6 traffic of the host to the attacker controlled container.
Even if there was no IPv6 traffic before, if the DNS returns A (IPv4) and AAAA (IPv6) records, many HTTP libraries will try to connect via IPv6 first then fallback to IPv4, giving an opportunity to the attacker to respond.
If by chance you also have on the host a vulnerability like last year’s RCE in apt (CVE-2019-3462), you can now escalate to the host.

### Patches
Weave Net version 2.6.3 (to be released soon) will disable the accept_ra option on the veth devices that it creates.

### Workarounds
Users should not run containers with CAP_NET_RAW capability.  This has been the advice from Weave Net for years.
https://www.weave.works/docs/net/latest/kubernetes/kube-addon/#-securing-the-setup

### For more information
If you have any questions or comments about this advisory:
* Open an issue in [the Weave Net repo](https://github.com/weaveworks/weave/issues/new)
* Join the <a href="https://slack.weave.works/" target="_blank">Weave Users Slack</a>.
Vulnerability: GHSA-5vj8-3v2h-h38v
Summary: Remote Code Execution in next
Severity: HIGH
CVSS score: 0
CWE: CWE-20
Published: 2020-09-04T18:04:08Z

Versions of `next` prior to 5.1.0 are vulnerable to Remote Code Execution. The `/path:` route fails to properly sanitize input and passes it to a `require()` call. This allows attackers to execute JavaScript code on the server. Note that prior version 0.9.9 package `next` npm package hosted a different utility (0.4.1 being the latest version of that codebase), and this advisory does not apply to those versions.

## Recommendation

Upgrade to version 5.1.0.
Vulnerability: GHSA-g694-m8vq-gv9h
Summary: URL Confusion When Scheme Not Supplied in medialize/uri.js
Aliases: CVE-2022-1233
Severity: MODERATE
CVSS score: 6.5
CWE: CWE-601, CWE-115
Published: 2022-04-05T00:00:17Z

When parsing a URL without a scheme and with excessive slashes, like ///www.example.com, URI.js will parse the hostname as null and the path as /www.example.com.

Such behaviour is different from that exhibited by browsers, which will parse ///www.example.com as http://www.example.com instead. For example, the following will cause a redirect to http://www.example.com:
Vulnerability: GHSA-9r7h-6639-v5mw
Summary: Cross-Site Scripting in bootstrap-select
Severity: HIGH
CVSS score: 0
CWE: CWE-79
Published: 2020-09-03T15:54:00Z

Versions of `bootstrap-select` prior to 1.13.6 are vulnerable to Cross-Site Scripting (XSS).  The package does not escape `title` values on `<option>` tags. This may allow attackers to execute arbitrary JavaScript in a victim's browser.


## Recommendation

Upgrade to version 1.13.6 or later.
Vulnerability: GHSA-h3m2-h22h-695r
Summary: Malicious Package in ali-contributor
Severity: CRITICAL
CVSS score: 9.8
CWE: CWE-506
Published: 2020-09-03T17:29:31Z

All versions of `ali-contributor` contain malicious code. The package uploads system information to a remote server, downloads a file and executes it.


## Recommendation

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer.

The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.
Vulnerability: GHSA-6wp2-fw3v-mfmc
Summary: Memory corruption in array-tools
Aliases: CVE-2020-36452
Severity: CRITICAL
CVSS score: 9.8
CWE: CWE-909, CWE-908
Published: 2021-08-25T20:57:19Z

An issue was discovered in the array-tools crate before 0.3.2 for Rust. Affected versions of this crate don't guard against panics, so that partially uninitialized buffer is dropped when user-provided `T::clone()` panics in `FixedCapacityDequeLike<T, A>::clone()`. This causes memory corruption.