-
### Describe the bug
When running `pnpm audit` Ican see that there is a vulnerabilty in lodash and lodash is used by shadcn-ui under the hood.
high │ Command Injection i…
-
Hi. Recently i found RCE vulnerabilty on your code. The reason for the occurrence of this vulnerability is due to the lack of any control while receiving user input.
Step to repruduce:
- Setup…
-
The current version bundled is very old and contain vulnerabilities.
An hacker could leverage the bundled executable in some targeted scenario where they know the zip file are embedded in an applicat…
-
**Is your feature request related to a problem? Please describe.**
Starting with version 2.2.220 H2 database writes the files with version v3. This version is currently not supported by DBeaver, resu…
-
I found 24 vulnerabily in the current repo `shell> trivy repo https://github.com/brafdlog/caspion -s HIGH,CRITICAL`
FYI
```html
nuxt/yarn.lock (yarn)
=====================
Total: 24 (HIGH: 2…
-
The following CVEs I do not consider as vulnerabilties:
* https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35326 https://github.com/idhyt/pocs/blob/main/libyaml/CVE-2024-35326.c
* https://cve…
-
## Description
While we use snyk for the nightly dependency security scan, we also use use https://owasp.org/www-project-dependency-check/ during release for updating the release notes.
The OWAS…
-
### Type
Suggestions for Improvement
### What would you like to report?
**Context**
One of the parts of the supply chain in modern ML systems is MLOps software - like i.e. MLFlow, Prefect et…
mik0w updated
4 months ago
-
* Create tooling to use [clair](https://github.com/coreos/clair) to scan our images for vulnerabilities.
* Drive using Travis.
* Run on a cron
* Improve tooling to rebuild when vulnerabilties…
-
Hi
I'd like to know if the xlog contains the vulnerabilty similar to log4j?
I checked there is no file with jndi interface. but I'd like to get confirmed officially.
Thanks