-
> proc-macro-error is unmaintained
| Details | |
| ------------------- | ---------------------------------------------- |
| Status …
-
### What feature do you want to see added?
Please see: https://github.com/jenkinsci/ansible-plugin/issues/127 Recent security requirements has made the plugin difficult to use. We do not use any va…
-
## Feature Request
Webhook when a new stream appears
#### Use Case:
Our pain is in the dynamism, we need to know ahead of time whether some kind of flow has appeared.
The logic is this:
1. The pr…
-
The Mageia distribution now exports its vulnerability reports in OSV format. Here are some key URLs:
Source URL: `https://advisories.mageia.org/.html`
OSV Formatted URL: `https://advisories.mageia…
-
**Until PR is merge to mitigate this attack vector, package should be deemed unsafe for use.**
NPM IP package vulnerable to Server-Side Request Forgery (SSRF) attacks, see [GitHub advisory](https:/…
-
### Version
5.0.8
### Reproduction link
- [minimatch ReDoS vulnerability](https://github.com/advisories/GHSA-f8q6-p94x-37v3)
- [Exposure of Sensitive Information to an Unauthorized Actor in na…
-
The docker configuration files from your docker image are downloadable after you have setup the website.
You can see the mysql passwords in plain text and the readme files and also docker config file…
-
Findings for Container Security, Medium, [TheRedHatter/javagoof:Dockerfile]:CVE-2017-10350
## Component Details
- **Exploit Maturity**: no-known-exploit
- **Vulnerable Package**: -
- **Current Versi…
-
As a national CERT we often include (parts of) text from vendors in our generated CSAF documents. These texts are in the `notes` section of the `vulnerability properties`. In the `references` section …
-
### NuGet Product(s) Involved
dotnet.exe
### The Elevator Pitch
(Sent here from https://github.com/dotnet/sdk/issues/24193)
I did a scan using `dotnet list package --vulnerable --include-transit…