-
```
http://www.milw0rm.com/exploits/5691
```
Original issue reported on code.google.com by `n0b0d...@gmail.com` on 29 May 2008 at 11:22
-
After a fresh install, it was seen that there are currently 66 code vulnerabilities found within the project.
This issue is created to ensure we've updated to newer version that no longer pose a th…
-
See the attached zip for a design discussed with @ziadhany and @TG1999
[federatedcode-data-structure.zip](https://github.com/nexB/federatedcode/files/14222816/federatedcode-data-structure.zip)
The …
-
My organisation has allowed us a test environment to try out various Azure tools. The container built as part of this example is shown as having over a dozen vulnerabilties in Security Centre. What…
-
In the release notes (security notes) of version 7.50.0 I found updated OpenSSL from 3.0.11 to 3.0.12.
MIcrosoft Defender still found OpenSSL dll's with version 3.0.8 with known vulnerabilties in t…
-
When used by multiple teams, it is important to be able to understand what applies to the set of projects they are responsible for. So, being able to establish "scope" results in other views (i.e. com…
-
Hello,
Thank's for your job.
Your container has a crtitcal vulnerabily :
![image](https://user-images.githubusercontent.com/23457789/123952023-bbe35080-d9a5-11eb-9658-e997aa45c204.png)
Can…
-
**What are the exploit requirements of a vulnerability?**
Navigating from the high-level graphical representation (e.g dot language abstraction) to the lower-level properties of software. The lower…
-
There is no dedicated source of data for Maven/Java package vulnerabilities. We should ensure that we can surface that data from our other sources with proper package URLs.
-
Snyk is enabled in the CI pipeline. To make it easier for ourselves to execute the scans locally, we should add the cli tool from snyk.