← Toutes les vulnérabilités

LOWSupply chain

GHSA-7CFQ-5MHV-JRP9

go · github.com/inspektor-gadget/inspektor-gadget

Résumé

Inspektor Gadget: Unprivileged container can crash USDT note parser via crafted ELF (no shipped gadget affected)

Références

Vulnérabilités liées

Tout Supply chain →

HIGHGHSA-WV27-2VQP-J7G5
Gogs has the ability to import local repositories via Mirror Settings
HIGHGHSA-WF69-R4MX-43RR
AVideo Vulnerable to Unauthenticated .env File Exposure via Official Docker Compose Configuration
HIGHGHSA-FFM6-VVPH-G5F5
OpenCTI has Semi-Blind SSRF via Unvalidated External URL in Data Ingestion Feature
MEDIUMGHSA-3QQ3-668M-V9MJ
Gogs has a Denial of Service in repository/wiki file listing web pages
MEDIUMGHSA-78VR-Q6CF-C7P6
Craft Commerce: Partial Payment Amount Without Lower Bound Validation
MEDIUMGHSA-3J69-69WJ-XQX2
UltraJSON: Malformed/Truncated UTF-8 Accepted and Silently Rewritten in ujson.dumps()