deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-5206
Published: 2024-06-06
Description: A sensitive data leakage vulnerability was identified in scikit-learn's TfidfVectorizer, specifically in versions up to and including 1.4.1.post1, which was fixed in version 1.5.0. The vulnerability arises from the unexpected storage of all tokens present in the training data within the `stop_words_` attribute, rather than only storing the subset of tokens required for the TF-IDF technique to function. This behavior leads to the potential leakage of sensitive information, as the `stop_words_` attribute could contain tokens that were meant to be discarded and not stored, such as passwords or keys. The impact of this vulnerability varies based on the nature of the data being processed by the vectorizer.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-921, CWE-922
References: https://github.com/scikit-learn/scikit-learn/commit/70ca21f106b603b611da73012c9ade7cd8e438b8; https://huntr.com/bounties/14bc0917-a85b-4106-a170-d09d5191517c; https://github.com/scikit-learn/scikit-learn/commit/70ca21f106b603b611da73012c9ade7cd8e438b8
CVE: CVE-2024-5225
Published: 2024-06-06
Description: An SQL Injection vulnerability exists in the berriai/litellm repository, specifically within the `/global/spend/logs` endpoint. The vulnerability arises due to improper neutralization of special elements used in an SQL command. The affected code constructs an SQL query by concatenating an unvalidated `api_key` parameter directly into the query, making it susceptible to SQL Injection if the `api_key` contains malicious data. This issue affects the latest version of the repository. Successful exploitation of this vulnerability could lead to unauthorized access, data manipulation, exposure of confidential information, and denial of service (DoS).
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://huntr.com/bounties/491e4884-0306-4cd4-8fe2-9a19de33bf5c; https://huntr.com/bounties/491e4884-0306-4cd4-8fe2-9a19de33bf5c
CVE: CVE-2024-5248
Published: 2024-06-06
Description: In lunary-ai/lunary version 1.2.5, an improper access control vulnerability exists due to a missing permission check in the `GET /v1/users/me/org` endpoint. The platform's role definitions restrict the `Prompt Editor` role to prompt management and project viewing/listing capabilities, explicitly excluding access to user information. However, the endpoint fails to enforce this restriction, allowing users with the `Prompt Editor` role to access the full list of users in the organization. This vulnerability allows unauthorized access to sensitive user information, violating the intended access controls.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://github.com/lunary-ai/lunary/commit/7f24ec1c3588992a07fd70573c43a0897eb523a2; https://huntr.com/bounties/4ec75087-5630-4813-952b-88ccabe6d117; https://huntr.com/bounties/4ec75087-5630-4813-952b-88ccabe6d117
CVE: CVE-2024-5278
Published: 2024-06-06
Description: gaizhenbiao/chuanhuchatgpt is vulnerable to an unrestricted file upload vulnerability due to insufficient validation of uploaded file types in its `/upload` endpoint. Specifically, the `handle_file_upload` function does not sanitize or validate the file extension or content type of uploaded files, allowing attackers to upload files with arbitrary extensions, including HTML files containing XSS payloads and Python files. This vulnerability, present in the latest version as of 20240310, could lead to stored XSS attacks and potentially result in remote code execution (RCE) on the server hosting the application.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-434
References: https://github.com/gaizhenbiao/chuanhuchatgpt/commit/22007a77f037c0cf76180f9b73a8d19e87dad02e; https://huntr.com/bounties/ea821d86-941b-40f3-a857-91f758848e05; https://huntr.com/bounties/ea821d86-941b-40f3-a857-91f758848e05
CVE: CVE-2024-5304
Published: 2024-06-06
Description: Kofax Power PDF TGA File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

The specific flaw exists within the parsing of TGA files. The issue results from the lack of proper validation of user-supplied data, which can result in a write  past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-22920.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://www.zerodayinitiative.com/advisories/ZDI-24-549/; https://www.zerodayinitiative.com/advisories/ZDI-24-549/
CVE: CVE-2024-5305
Published: 2024-06-06
Description: Kofax Power PDF PDF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

The specific flaw exists within the parsing of PDF files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-22921.
CVSS Score: 7.8 (HIGH)
CWE: CWE-121, CWE-120
References: https://www.zerodayinitiative.com/advisories/ZDI-24-550/; https://www.zerodayinitiative.com/advisories/ZDI-24-550/
CVE: CVE-2024-5306
Published: 2024-06-06
Description: Kofax Power PDF PDF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

The specific flaw exists within the parsing of PDF files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-22930.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119, CWE-119
References: https://www.zerodayinitiative.com/advisories/ZDI-24-551/; https://www.zerodayinitiative.com/advisories/ZDI-24-551/
CVE: CVE-2024-5307
Published: 2024-06-06
Description: Kofax Power PDF AcroForm Annotation Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

The specific flaw exists within the handling of Annotation objects in AcroForms. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-22933.
CVSS Score: 3.3 (LOW)
CWE: CWE-125, CWE-125
References: https://www.zerodayinitiative.com/advisories/ZDI-24-552/; https://www.zerodayinitiative.com/advisories/ZDI-24-552/
CVE: CVE-2024-5328
Published: 2024-06-06
Description: A Server-Side Request Forgery (SSRF) vulnerability exists in the lunary-ai/lunary application, specifically within the endpoint '/auth/saml/tto/download-idp-xml'. The vulnerability arises due to the application's failure to validate user-supplied URLs before using them in server-side requests. An attacker can exploit this vulnerability by sending a specially crafted request to the affected endpoint, allowing them to make unauthorized requests to internal or external resources. This could lead to the disclosure of sensitive information, service disruption, or further attacks against the network infrastructure. The issue affects the latest version of the application as of the report.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-918
References: https://huntr.com/bounties/80b09757-d9a0-44d1-932f-2461fc8fec69; https://huntr.com/bounties/80b09757-d9a0-44d1-932f-2461fc8fec69
CVE: CVE-2024-5478
Published: 2024-06-06
Description: A Cross-site Scripting (XSS) vulnerability exists in the SAML metadata endpoint `/auth/saml/${org?.id}/metadata` of lunary-ai/lunary version 1.2.7. The vulnerability arises due to the application's failure to escape or validate the `orgId` parameter supplied by the user before incorporating it into the generated response. Specifically, the endpoint generates XML responses for SAML metadata, where the `orgId` parameter is directly embedded into the XML structure without proper sanitization or validation. This flaw allows an attacker to inject arbitrary JavaScript code into the generated SAML metadata page, leading to potential theft of user cookies or authentication tokens.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://huntr.com/bounties/e899f496-d493-4c06-b596-cb0a88ad451b; https://huntr.com/bounties/e899f496-d493-4c06-b596-cb0a88ad451b
CVE: CVE-2024-5480
Published: 2024-06-06
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE: CVE-2024-5550
Published: 2024-06-06
Description: In h2oai/h2o-3 version 3.40.0.4, an exposure of sensitive information vulnerability exists due to an arbitrary system path lookup feature. This vulnerability allows any remote user to view full paths in the entire file system where h2o-3 is hosted. Specifically, the issue resides in the Typeahead API call, which when requested with a typeahead lookup of '/', exposes the root filesystem including directories such as /home, /usr, /bin, among others. This vulnerability could allow attackers to explore the entire filesystem, and when combined with a Local File Inclusion (LFI) vulnerability, could make exploitation of the server trivial.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22
References: https://huntr.com/bounties/e76372c2-39be-4984-a7c8-7048a75a25dc; https://huntr.com/bounties/e76372c2-39be-4984-a7c8-7048a75a25dc
CVE: CVE-2024-5552
Published: 2024-06-06
Description: kubeflow/kubeflow is vulnerable to a Regular Expression Denial of Service (ReDoS) attack due to inefficient regular expression complexity in its email validation mechanism. An attacker can remotely exploit this vulnerability without authentication by providing specially crafted input that causes the application to consume an excessive amount of CPU resources. This vulnerability affects the latest version of kubeflow/kubeflow, specifically within the centraldashboard-angular backend component. The impact of exploiting this vulnerability includes resource exhaustion, and service disruption.
CVSS Score: 7.5 (HIGH)
CWE: CWE-1333
References: https://huntr.com/bounties/0c1d6432-f385-4c54-beea-9f8c677def5b; https://huntr.com/bounties/0c1d6432-f385-4c54-beea-9f8c677def5b
CVE: CVE-2024-5609
Published: 2024-06-06
Description: Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-6966. Reason: This candidate is a reservation duplicate of CVE-2023-6966. Notes: All CVE users should reference CVE-2023-6966 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
CVE: CVE-2024-22074
Published: 2024-06-06
Description: Dynamsoft Service 1.8.1025 through 1.8.2013, 1.7.0330 through 1.7.2531, 1.6.0428 through 1.6.1112, 1.5.0625 through 1.5.3116, 1.4.0618 through 1.4.1230, and 1.0.516 through 1.3.0115 has Incorrect Access Control. This is fixed in 1.8.2014, 1.7.4212, 1.6.3212, 1.5.31212, 1.4.3212, and 1.3.3212.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-284
References: https://www.dynamsoft.com/support/security-bulletin-dwt-2024-22074/; https://www.dynamsoft.com/support/security-bulletin-dwt-2024-22074/
CVE: CVE-2024-32752
Published: 2024-06-06
Description: The iSTAR door controllers running firmware prior to version 6.6.B, does not support authenticated
communications with ICU, which may allow an attacker to gain unauthorized access
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-306
References: https://www.cisa.gov/news-events/ics-advisories/icsa-24-158-04; https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories; https://www.cisa.gov/news-events/ics-advisories/icsa-24-158-04
CVE: CVE-2024-36795
Published: 2024-06-06
Description: Insecure permissions in Netgear WNR614 JNR1010V2/N300-V1.1.0.54_1.0.1 allows attackers to access URLs and directories embedded within the firmware via unspecified vectors.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-22
References: https://redfoxsec.com/blog/security-advisory-multiple-vulnerabilities-in-netgear-wnr614-router/; https://redfoxsec.com/blog/security-advisory-multiple-vulnerabilities-in-netgear-wnr614-router/
CVE: CVE-2023-49441
Published: 2024-06-06
Description: dnsmasq 2.9 is vulnerable to Integer Overflow via forward_query.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190, CWE-190
References: https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2023q4/017332.html; https://thekelleys.org.uk/gitweb/?p=dnsmasq.git%3Ba=commit%3Bh=65c2d6afd67a032f45f40d7e4d620f5d73e5f07d; https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2023q4/017332.html
CVE: CVE-2023-51847
Published: 2024-06-06
Description: An issue in obgm and Libcoap v.a3ed466 allows a remote attacker to cause a denial of service via thecoap_context_t function in the src/coap_threadsafe.c:297:3 component.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://github.com/obgm/libcoap/issues/1302; https://github.com/obgm/libcoap/issues/1302
CVE: CVE-2024-22524
Published: 2024-06-06
Description: dnspod-sr 0dfbd37 is vulnerable to buffer overflow.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://github.com/DNSPod/dnspod-sr/issues/60; https://github.com/DNSPod/dnspod-sr/issues/60
CVE: CVE-2024-22525
Published: 2024-06-06
Description: dnspod-sr 0dfbd37 contains a SEGV.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://github.com/DNSPod/dnspod-sr/issues/61; https://github.com/DNSPod/dnspod-sr/issues/61
CVE: CVE-2024-24192
Published: 2024-06-06
Description: robdns commit d76d2e6 was discovered to contain a heap overflow via the component block->filename at /src/zonefile-insertion.c.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-125, CWE-120
References: https://github.com/robertdavidgraham/robdns/issues/8; https://github.com/robertdavidgraham/robdns/issues/8
CVE: CVE-2024-24194
Published: 2024-06-06
Description: robdns commit d76d2e6 was discovered to contain a NULL pointer dereference via the item->tokens component at /src/conf-parse.c.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://github.com/robertdavidgraham/robdns/issues/10; https://github.com/robertdavidgraham/robdns/issues/10
CVE: CVE-2024-24195
Published: 2024-06-06
Description: robdns commit d76d2e6 was discovered to contain a misaligned address at /src/zonefile-insertion.c.
CVSS Score: 7.5 (HIGH)
References: https://github.com/robertdavidgraham/robdns/issues/9; https://github.com/robertdavidgraham/robdns/issues/9
CVE: CVE-2024-24198
Published: 2024-06-06
Description: smartdns commit 54b4dc was discovered to contain a misaligned address at smartdns/src/util.c.
CVSS Score: 7.5 (HIGH)
References: https://github.com/pymumu/smartdns/issues/1629; https://github.com/pymumu/smartdns/issues/1629
CVE: CVE-2024-24199
Published: 2024-06-06
Description: smartdns commit 54b4dc was discovered to contain a misaligned address at smartdns/src/dns.c.
CVSS Score: 7.5 (HIGH)
References: https://github.com/pymumu/smartdns/issues/1628; https://github.com/pymumu/smartdns/issues/1628
CVE: CVE-2024-36774
Published: 2024-06-06
Description: An arbitrary file upload vulnerability in Monstra CMS v3.0.4 allows attackers to execute arbitrary code via uploading a crafted PHP file.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434, CWE-434
References: https://github.com/OoLs5/VulDiscovery/blob/main/poc.docx; https://github.com/OoLs5/VulDiscovery/blob/main/poc.docx
CVE: CVE-2024-36775
Published: 2024-06-06
Description: A cross-site scripting (XSS) vulnerability in Monstra CMS v3.0.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the About Me parameter in the Edit Profile page.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/OoLs5/VulDiscovery/blob/main/monstra_xss.pdf; https://github.com/OoLs5/VulDiscovery/blob/main/monstra_xss.pdf
CVE: CVE-2024-36823
Published: 2024-06-06
Description: The encrypt() function of Ninja Core v7.0.0 was discovered to use a weak cryptographic algorithm, leading to a possible leakage of sensitive information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-326, CWE-327
References: https://github.com/ninjaframework/ninja/issues; https://github.com/ninjaframework/ninja/issues
CVE: CVE-2024-4013
Published: 2024-06-06
Description: A bug exists in the API, mesh_node_power_off(), which fails to copy the contents of the Replay Protection 
List (RPL) from RAM to NVM before powering down, resulting in the ability to replay unsaved messages. Note that as of June 2024, the Gecko SDK was renamed to the Simplicity SDK, and the versioning scheme 
was changed from Gecko SDK vX.Y.Z to Simplicity SDK YYYY.MM.Patch#.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-404
References: https://community.silabs.com/068Vm000006rR53; https://github.com/SiliconLabs/gecko_sdk/releases; https://community.silabs.com/068Vm000006rR53
CVE: CVE-2023-37539
Published: 2024-06-06
Description: The Domino Catalog template is susceptible to a Stored Cross-Site Scripting (XSS) vulnerability. An attacker with the ability to edit documents in the catalog application/database created from this template can embed a cross site scripting attack.  The attack would be activated by an end user clicking it.
CVSS Score: 8.4 (HIGH)
CWE: CWE-79, CWE-79
References: https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0113715; https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0113715
CVE: CVE-2022-4968
Published: 2024-06-07
Description: netplan leaks the private key of wireguard to local users. Versions after 1.0 are not affected.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-497
References: https://bugs.launchpad.net/netplan/+bug/1987842; https://bugs.launchpad.net/ubuntu/+source/netplan.io/+bug/2065738; https://github.com/canonical/netplan/commit/4c39b75b5c6ae7d976bda6da68da60d9a7f085ee
CVE: CVE-2023-6876
Published: 2024-06-07
Description: The Clever Fox – One Click Website Importer by Nayra Themes plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'clever-fox-activate-theme' function in all versions up to, and including, 25.2.0. This makes it possible for authenticated attackers, with subscriber access and above, to modify the active theme, including to an invalid value which can take down the site.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://plugins.trac.wordpress.org/browser/clever-fox/trunk/clever-fox.php#L539; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3096085%40clever-fox&new=3096085%40clever-fox&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/9e1f94d9-8be6-4174-90a5-820c0207a2fa?source=cve
CVE: CVE-2024-1689
Published: 2024-06-07
Description: The WooCommerce Tools plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the woocommerce_tool_toggle_module() function in all versions up to, and including, 1.2.9. This makes it possible for authenticated attackers, with subscriber-level access and above, to deactivate arbitrary plugin modules.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://plugins.trac.wordpress.org/browser/woo-tools/trunk/admin/admin-init.php#L61; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3098165%40woo-tools&new=3098165%40woo-tools&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/3830c901-be36-4c4b-976b-d388b6af0c67?source=cve
CVE: CVE-2023-32475
Published: 2024-06-07
Description: Dell BIOS contains a missing support for integrity check vulnerability. An attacker with physical access to the system could potentially bypass security mechanisms to run arbitrary code on the system.
CVSS Score: 7.6 (HIGH)
CWE: CWE-353
References: https://www.dell.com/support/kbdoc/en-us/000215644/dsa-2023-222-security-update-for-an-amd-bios-vulnerability; https://www.dell.com/support/kbdoc/en-us/000215644/dsa-2023-222-security-update-for-an-amd-bios-vulnerability
CVE: CVE-2024-1768
Published: 2024-06-07
Description: The Clever Fox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's info box block in all versions up to, and including, 25.2.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3096085%40clever-fox&new=3096085%40clever-fox&sfp_email=&sfph_mail=#file1; https://www.wordfence.com/threat-intel/vulnerabilities/id/16af8724-595c-4daa-80bd-8125a32cc502?source=cve; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3096085%40clever-fox&new=3096085%40clever-fox&sfp_email=&sfph_mail=#file1
CVE: CVE-2024-3987
Published: 2024-06-07
Description: The WP Mobile Menu – The Mobile-Friendly Responsive Menu plugin for WordPress is vulnerable to Stored Cross-Site Scripting via image alt text in all versions up to, and including, 2.8.4.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/changeset/3097563/mobile-menu/trunk/includes/class-wp-mobile-menu-core.php; https://www.wordfence.com/threat-intel/vulnerabilities/id/7bcbc6b6-ed05-4709-bf05[PII_REDACTED]39?source=cve; https://plugins.trac.wordpress.org/changeset/3097563/mobile-menu/trunk/includes/class-wp-mobile-menu-core.php
CVE: CVE-2024-5607
Published: 2024-06-07
Description: The GDPR CCPA Compliance & Cookie Consent Banner plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several functions named ajaxUpdateSettings() in all versions up to, and including, 2.7.0. This makes it possible for authenticated attackers, with Subscriber-level access and above, to modify the plugin's settings, update page content, send arbitrary emails and inject malicious web scripts.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3097680%40ninja-gdpr-compliance&new=3097680%40ninja-gdpr-compliance&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/b8f870a6-26a5-4f98-9bd6-12736c561265?source=cve; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3097680%40ninja-gdpr-compliance&new=3097680%40ninja-gdpr-compliance&sfp_email=&sfph_mail=