-
Hello,
We are running ThreadX version 6.2.1 on products where a version bump is not possible (will bump for future products).
Would it be possible to know which commit/PR is responsible for fixing…
-
:mag: Vulnerabilities of ghcr.io/2pisoftware/cmfive:pr-159
:package: Image Reference ghcr.io/2pisoftware/cmfive:pr-159
digestsha256:feb3744f121b4cc5dd15d88501c6c91628a3730546e411f05dc1a3043d62…
-
**Fleet version**: Reported by customer on 4.53.1 and observed in Dogfood on 4.55.1
### 💥 Actual behavior
[`CVE-2021-21287`](https://nvd.nist.gov/vuln/detail/CVE-2021-21287) and [`CVE-2023-…
-
# Summary
The overflow occurs in ``deviceCoords array``, the calculated index or the number of elements accessed is incorrect, leading to an out-of-bounds read and the ``ud2`` instruction on macOS …
-
### Template Information:
Jenkins 2.50 through 2.423 (both inclusive), LTS 2.60.1 through 2.414.1 (both inclusive) does not exclude sensitive build variables (e.g., password parameter values) from …
-
On `mark-testing` or `mark-unstable` could be good to upgrade `expat` and check what happens.
There are tons of CVE to fix:
* CVE-2024-45490
* CVE-2024-45491
* CVE-2024-45492
* CVE-2024-28757
…
-
### Community Note
roxy-agent@6.4.0 depends socks@2.7.1 . This version have CVE-2023-42282.
So I want to update `socks` version to 2.7.3 .
## Bug Report
**Domain Manager Configuration*…
-
### Package URl
pkg:maven/org.keycloak/keycloak-osgi-adapter@18.0.2
### CPE
cpe:2.3:a:keycloak:keycloak:18.0.2:*:*:*:*:*:*:*, cpe:2.3:a:redhat:keycloak:18.0.2:*:*:*:*:*:*:*
### CVE
CVE-2023-6563
…
-
### Package URl
pkg:npm/ejs@3.1.10
### CPE
cpe:2.3:a:ejs:ejs:3.1.10:*:*:*:*:*:*:*
### CVE
CVE-2023-29827
### ODC Integration
None
### ODC Version
latest
### Description
Actual vulnerable co…
-
Hi Crowdsec Team, first of all thanks for this great product, I used it a lot in the past months and really liked it.
Unfortunately this image as well as the kubernetes lapi and deamonsets expose a …