aswin1906/github-advisory-2019.csv huggingface dataset:
Installation information leak in Eclipse Jetty
Advisory: GHSA-xc67-hjx6-cgg6
Aliases: CVE-2019-10247
Published: 2019-04-23T16:07:12Z
Severity: type: CVSS_V3
score: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected: package: ecosystem: Maven
name: org.eclipse.jetty:jetty-server
ranges: type: ECOSYSTEM
events: introduced: 7.0.0
fixed: 9.2.28.v20190418
database_specific: last_known_affected_version_range: <= 9.2.27.v20190403
package: ecosystem: Maven
name: org.eclipse.jetty:jetty-server
ranges: type: ECOSYSTEM
events: introduced: 9.3.0
fixed: 9.3.27.v20190418
database_specific: last_known_affected_version_range: <= 9.3.26.v20190403
package: ecosystem: Maven
name: org.eclipse.jetty:jetty-server
ranges: type: ECOSYSTEM
events: introduced: 9.4.0
fixed: 9.4.17.v20190418
database_specific: last_known_affected_version_range: <= 9.4.16.v20190411
cwe_ids: CWE-200
CWE-213
severity: MODERATE

In Eclipse Jetty version 7.x, 8.x, 9.2.27 and older, 9.3.26 and older, and 9.4.16 and older, the server running on any OS and Jetty version combination will reveal the configured fully qualified directory base resource location on the output of the 404 error for not finding a Context that matches the requested path. The default server behavior on jetty-distribution and jetty-home will include at the end of the Handler tree a DefaultHandler, which is responsible for reporting this 404 error, it presents the various configured contexts as HTML for users to click through to. This produced HTML includes output that contains the configured fully qualified directory base resource location for each context.
Moderate severity vulnerability that affects org.apache.tomcat.embed:tomcat-embed-core
Advisory: GHSA-r53m-pfr5-7v87
Published: 2019-04-18T14:50:19Z
Withdrawn: 2020-06-17T15:15:06Z
Affected: package: ecosystem: Maven
name: org.apache.tomcat.embed:tomcat-embed-core
ranges: type: ECOSYSTEM
events: introduced: 9.0.0.M1
fixed: 9.0.16
database_specific: last_known_affected_version_range: <= 9.0.14
package: ecosystem: Maven
name: org.apache.tomcat.embed:tomcat-embed-core
ranges: type: ECOSYSTEM
events: introduced: 8.5.0
fixed: 8.5.38
severity: MODERATE

**Withdrawn:** Duplicate of GHSA-qcxh-w3j9-58qr
Jupyter Notebook open redirect vulnerability
Advisory: GHSA-rcx2-m7jp-p9wj
Aliases: CVE-2019-10856
Published: 2019-04-09T19:47:27Z
Severity: type: CVSS_V3
score: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Affected: package: ecosystem: PyPI
name: notebook
ranges: type: ECOSYSTEM
events: introduced: 0
fixed: 5.7.8
cwe_ids: CWE-601
severity: MODERATE

In Jupyter Notebook before 5.7.8, an open redirect can occur via an empty netloc. This issue exists because of an incomplete fix for CVE-2019-10255.
Moderate severity vulnerability that affects org.apache.jspwiki:jspwiki-main
Advisory: GHSA-fmpq-w5q6-9vf9
Aliases: CVE-2019-0224
Published: 2019-04-02T15:46:48Z
Severity: type: CVSS_V3
score: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Affected: package: ecosystem: Maven
name: org.apache.jspwiki:jspwiki-main
ranges: type: ECOSYSTEM
events: introduced: 2.9.0
fixed: 2.11.0.M3
database_specific: last_known_affected_version_range: <= 2.11.0.M2
cwe_ids: CWE-79
severity: MODERATE

In Apache JSPWiki 2.9.0 to 2.11.0.M2, a carefully crafted URL could execute javascript on another user's session. No information could be saved on the server or jspwiki database, nor would an attacker be able to execute js on someone else's browser; only on its own browser.
Improper Certificate Validation in urllib3
Advisory: GHSA-mh33-7rrq-662w
Aliases: CVE-2019-11324
Published: 2019-04-19T16:55:10Z
Severity: type: CVSS_V3
score: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Affected: package: ecosystem: PyPI
name: urllib3
ranges: type: ECOSYSTEM
events: introduced: 0
fixed: 1.24.2
cwe_ids: CWE-295
severity: HIGH

The urllib3 library before 1.24.2 for Python mishandles certain cases where the desired set of CA certificates is different from the OS store of CA certificates, which results in SSL connections succeeding in situations where a verification failure is the correct outcome. This is related to use of the `ssl_context`, `ca_certs`, or `ca_certs_dir` argument.
High severity vulnerability that affects Jinja2
Advisory: GHSA-hj2j-77xm-mc5v
Aliases: CVE-2016-10745
Published: 2019-04-10T14:30:13Z
Severity: type: CVSS_V3
score: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Affected: package: ecosystem: PyPI
name: Jinja2
ranges: type: ECOSYSTEM
events: introduced: 0
fixed: 2.8.1
cwe_ids: CWE-134
severity: HIGH

In Pallets Jinja before 2.8.1, str.format allows a sandbox escape.
Integer Overflow or Wraparound in Google TensorFlow
Advisory: GHSA-mw6v-crh8-8533
Aliases: CVE-2018-7575
Published: 2019-04-30T15:36:41Z
Severity: type: CVSS_V3
score: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected: package: ecosystem: PyPI
name: tensorflow
ranges: type: ECOSYSTEM
events: introduced: 1.0.0
fixed: 1.7.1
cwe_ids: CWE-190
severity: CRITICAL

### Issue Description
Google TensorFlow 1.7.x and earlier is affected by a Buffer Overflow vulnerability. The type of exploitation is context-dependent. The block size in meta file might contain a large int64 value which causes an integer overflow upon addition. Subsequent code using n as index may cause an out-of-bounds read.

### Impact
A maliciously crafted meta checkpoint could be used to cause the TensorFlow process to perform an out of bounds read on in process memory.
Jinja2 sandbox escape via string formatting
Advisory: GHSA-462w-v97r-4m45
Aliases: CVE-2019-10906
Published: 2019-04-10T14:30:24Z
Severity: type: CVSS_V3
score: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Affected: package: ecosystem: PyPI
name: Jinja2
ranges: type: ECOSYSTEM
events: introduced: 0
fixed: 2.10.1
cwe_ids: CWE-693
severity: HIGH

In Pallets Jinja before 2.10.1, `str.format_map` allows a sandbox escape.

The sandbox is used to restrict what code can be evaluated when rendering untrusted, user-provided templates. Due to the way string formatting works in Python, the `str.format_map` method could be used to escape the sandbox.

This issue was previously addressed for the `str.format` method in Jinja 2.8.1, which discusses the issue in detail. However, the less-common `str.format_map` method was overlooked. This release applies the same sandboxing to both methods.

If you cannot upgrade Jinja, you can override the `is_safe_attribute` method on the sandbox and explicitly disallow the `format_map` method on string objects.
Open Redirect vulnerability in jupyterhub and notebook
Advisory: GHSA-rv62-4pmj-xw6h
Aliases: CVE-2019-10255
Published: 2019-04-02T15:46:54Z
Severity: type: CVSS_V3
score: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Affected: package: ecosystem: PyPI
name: notebook
ranges: type: ECOSYSTEM
events: introduced: 0
fixed: 5.7.8
package: ecosystem: PyPI
name: jupyterhub
ranges: type: ECOSYSTEM
events: introduced: 0
fixed: 0.9.6
cwe_ids: CWE-601
severity: MODERATE

An Open Redirect vulnerability for all browsers in Jupyter Notebook before 5.7.8 and some browsers (Chrome, Firefox) in JupyterHub before 0.9.6 allows crafted links to the login page, which will redirect to a malicious site after successful login. Servers running on a base_url prefix are not affected.
Moderate severity vulnerability that affects total.js
Advisory: GHSA-72p5-2r6g-fm6v
Aliases: CVE-2019-10260
Published: 2019-04-02T15:46:52Z
Severity: type: CVSS_V3
score: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Affected: package: ecosystem: npm
name: total.js
ranges: type: ECOSYSTEM
events: introduced: 0
fixed: 3.3.0-13
database_specific: last_known_affected_version_range: <= 3.3.0-12
cwe_ids: CWE-79
severity: MODERATE

Total.js CMS 12.0.0 has XSS related to themes/admin/views/index.html (item.message) and themes/admin/public/ui.js (column.format).
High severity vulnerability that affects com.github.shyiko.ktlint:ktlint-core
Advisory: GHSA-r8h9-hq9c-2p5c
Aliases: CVE-2019-1010260
Published: 2019-04-08T15:18:54Z
Severity: type: CVSS_V3
score: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected: package: ecosystem: Maven
name: com.github.shyiko.ktlint:ktlint-core
ranges: type: ECOSYSTEM
events: introduced: 0
fixed: 0.30.0
cwe_ids: CWE-319
severity: HIGH

Using ktlint to download and execute custom rulesets can result in arbitrary code execution as the served jars can be compromised by a MITM. This attack is exploitable via Man in the Middle of the HTTP connection to the artifact servers. This vulnerability appears to have been fixed in 0.30.0 and later; after commit 5e547b287d6c260d328a2cb658dbe6b7a7ff2261.
Improper Restriction of Operations within the Bounds of a Memory Buffer in Google TensorFlow
Advisory: GHSA-frxx-2m33-6wcr
Aliases: CVE-2018-8825
Published: 2019-04-24T16:11:30Z
Severity: type: CVSS_V3
score: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected: package: ecosystem: PyPI
name: tensorflow
ranges: type: ECOSYSTEM
events: introduced: 1.5.0
fixed: 1.7.1
cwe_ids: CWE-119
severity: HIGH

Google TensorFlow 1.7 and below is affected by: Buffer Overflow. The impact is: execute arbitrary code (local). Users passing a malformed or malicious version of a TFLite graph into TOCO will cause TOCO to crash or cause a buffer overflow, potentially allowing malicious code to be executed.
Cleartext Transmission of Sensitive Information, Inclusion of Functionality from Untrusted Control Sphere , and Download of Code Without Integrity Check in Eclipse hawkBit 
Advisory: GHSA-jwqm-c9f2-2cq3
Aliases: CVE-2019-10240
Published: 2019-04-15T16:19:23Z
Severity: type: CVSS_V3
score: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected: package: ecosystem: Maven
name: org.eclipse.hawkbit:hawkbit-autoconfigure
ranges: type: ECOSYSTEM
events: introduced: 0
fixed: 0.3.0M2
database_specific: last_known_affected_version_range: <= 0.3.0M1
package: ecosystem: Maven
name: org.eclipse.hawkbit:hawkbit-ui
ranges: type: ECOSYSTEM
events: introduced: 0
fixed: 0.3.0M2
database_specific: last_known_affected_version_range: <= 0.3.0M1
package: ecosystem: Maven
name: org.eclipse.hawkbit:hawkbit-parent
ranges: type: ECOSYSTEM
events: introduced: 0
fixed: 0.3.0M2
database_specific: last_known_affected_version_range: <= 0.3.0M1
package: ecosystem: Maven
name: org.eclipse.hawkbit:hawkbit-starters
ranges: type: ECOSYSTEM
events: introduced: 0
fixed: 0.3.0M2
database_specific: last_known_affected_version_range: <= 0.3.0M1
package: ecosystem: Maven
name: org.eclipse.hawkbit:hawkbit-boot-starter
ranges: type: ECOSYSTEM
events: introduced: 0
fixed: 0.3.0M2
database_specific: last_known_affected_version_range: <= 0.3.0M1
package: ecosystem: Maven
name: org.eclipse.hawkbit:hawkbit-update-server
ranges: type: ECOSYSTEM
events: introduced: 0
fixed: 0.3.0M2
database_specific: last_known_affected_version_range: <= 0.3.0M1
package: ecosystem: Maven
name: org.eclipse.hawkbit:hawkbit-boot-starter-mgmt-ui
ranges: type: ECOSYSTEM
events: introduced: 0
fixed: 0.3.0M2
database_specific: last_known_affected_version_range: <= 0.3.0M1
package: ecosystem: Maven
name: org.eclipse.hawkbit:hawkbit-boot-starter-mgmt-api
ranges: type: ECOSYSTEM
events: introduced: 0
fixed: 0.3.0M2
database_specific: last_known_affected_version_range: <= 0.3.0M1
package: ecosystem: Maven
name: org.eclipse.hawkbit:hawkbit-boot-starter-dmf-api
ranges: type: ECOSYSTEM
events: introduced: 0
fixed: 0.3.0M2
database_specific: last_known_affected_version_range: <= 0.3.0M1
package: ecosystem: Maven
name: org.eclipse.hawkbit:hawkbit-boot-starter-ddi-api
ranges: type: ECOSYSTEM
events: introduced: 0
fixed: 0.3.0M2
database_specific: last_known_affected_version_range: <= 0.3.0M1
cwe_ids: CWE-319
CWE-494
CWE-829
severity: HIGH

Eclipse hawkBit versions prior to 0.3.0M2 resolved Maven build artifacts for the Vaadin based UI over HTTP instead of HTTPS. Any of these dependent artifacts could have been maliciously compromised by a MITM attack. Hence produced build artifacts of hawkBit might be infected.
Critical severity vulnerability that affects Auth0-WCF-Service-JWT
Advisory: GHSA-qpvx-gpqm-g98j
Aliases: CVE-2019-7644
Published: 2019-04-18T14:28:03Z
Severity: type: CVSS_V3
score: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected: package: ecosystem: NuGet
name: Auth0-WCF-Service-JWT
ranges: type: ECOSYSTEM
events: introduced: 0
fixed: 1.0.4
cwe_ids: CWE-209
severity: CRITICAL

Auth0 Auth0-WCF-Service-JWT before 1.0.4 leaks the expected JWT signature in an error message when it cannot successfully validate the JWT signature. If this error message is presented to an attacker, they can forge an arbitrary JWT token that will be accepted by the vulnerable application.
Missing Encryption of Sensitive Data in arrow-kt Arrow
Advisory: GHSA-rcj2-vvjx-87pm
Aliases: CVE-2019-11404
Published: 2019-04-22T17:15:40Z
Severity: type: CVSS_V3
score: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected: package: ecosystem: Maven
name: io.arrow-kt:arrow-ank-gradle
ranges: type: ECOSYSTEM
events: introduced: 0
fixed: 0.9.0
cwe_ids: CWE-311
severity: MODERATE

arrow-kt Arrow before 0.9.0 resolved Gradle build artifacts (for compiling and building the published JARs) over HTTP instead of HTTPS. Any of these dependent artifacts could have been maliciously compromised by an MITM attack.
CoAPthon DoS due to Exceptions
Advisory: GHSA-5xc6-fpc7-4qvg
Aliases: CVE-2018-12680
Published: 2019-04-08T15:19:01Z
Severity: type: CVSS_V3
score: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected: package: ecosystem: PyPI
name: CoAPthon
ranges: type: ECOSYSTEM
events: introduced: 0
last_affected: 4.0.2
cwe_ids: CWE-400
CWE-502
severity: HIGH

The `Serialize.deserialize()` method in CoAPthon 3.1, 4.0.0, 4.0.1, and 4.0.2 mishandles certain exceptions, leading to a denial of service in applications that use this library (e.g., the standard CoAP server, CoAP client, CoAP reverse proxy, example collect CoAP server and client) when they receive crafted CoAP messages.
Null pointer dereference in TensorFlow leads to exploitation
Advisory: GHSA-jfq2-rj7f-9gvf
Aliases: CVE-2018-7576
Published: 2019-04-24T16:11:27Z
Severity: type: CVSS_V3
score: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Affected: package: ecosystem: PyPI
name: tensorflow
ranges: type: ECOSYSTEM
events: introduced: 0
fixed: 1.7.0
cwe_ids: CWE-476
severity: MODERATE

Google TensorFlow 1.6.x and earlier is affected by: Null Pointer Dereference. The type of exploitation is: context-dependent.
Materialize-css vulnerable to Improper Neutralization of Input During Web Page Generation
Advisory: GHSA-rg3q-jxmp-pvjj
Aliases: CVE-2019-11004
Published: 2019-04-09T19:44:37Z
Severity: type: CVSS_V3
score: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Affected: package: ecosystem: npm
name: materialize-css
ranges: type: ECOSYSTEM
events: introduced: 0
last_affected: 1.0.0
package: ecosystem: npm
name: @materializecss/materialize
ranges: type: ECOSYSTEM
events: introduced: 0
fixed: 1.1.0-alpha
cwe_ids: CWE-79
severity: MODERATE

In Materialize through 1.0.0, XSS is possible via the Toast feature.