-
- http://bugcrowd.com/list-of-bug-bounty-programs/
- http://computersecuritywithethicalhacking.blogspot.com/2012/09/web-product-vulnerabilty-bug-bounty.html
- http://www.ehackingnews.com/2012/12/list-…
-
### What is your question?
Hey there 👋 .. First of all thanks for this great project! .. Just was curious, if there's a plan to also (maybe conditionally) support patching application specific depe…
-
### Current Behavior
There are a few vulnerability items listed that are actually no longer valid as they have been withdrawn or rejected. Yet if a project has a new version and the BOM is processed …
-
Attempting to run:
```
- name: Scan image for vulnerabilities
uses: Azure/container-scan@v0.1
with:
image-name: ${{ secrets.DOCKERHUB_USERNAME }}/myApp:${{ steps.v…
-
Hi
I found a known XSS vulnerability in the recent version of jTypesetter.
In particular, the bug we report is a known bug by CVE-2019-20041.
> wp_kses_bad_protocol in wp-includes/kses.php in W…
-
Running npm audit with this package installed shows high vulnerabilities with handlebars package (serverless-bundle > jest > jest-cli > @jest/core > @jest/reporters > istanbul-reports > handlebars)
A…
-
**What steps did you take and what happened:**
I am seeing a large number of trivy-operator generated vulnerability reports flagging CVEs for the following resources:
```
github.com/docker/dock…
-
see https://snyk.io/advisor/npm-package/redact-pii - multiple high severity vulnerabilities hoisted
mkj28 updated
2 years ago
-
The image `debian:stretch-slim` from Docker Hub, as of now, has a vulnerable glibc version:
```
$ docker images$ docker images
REPOSITORY TAG IMAGE ID CREA…
-
**Github username:** @0xRizwan
**Twitter username:** 0xRizwann
**Submission hash (on-chain):** 0xcbcf02e21c22ac8f5168ff95bf1032fdce7453ac34bcd89f1f5c38699c677f21
**Severity:** medium
**Description:*…