Publish Advisories

GHSA-3jxw-cv35-2mmv GHSA-7hj9-rv74-5g92 GHSA-qm2h-m799-86rc GHSA-rrhf-32rq-f28h GHSA-rrm6-wvj7-cwh2 GHSA-59hw-j9g6-mfg3 GHSA-f3wc-3vxv-xmvr GHSA-h475-7v3c-26q7 GHSA-j8r2-6x86-q33q GHSA-jchm-fm4q-c2fp GHSA-q9mw-68c2-j6m5 GHSA-qvq8-cw7f-m7m4 GHSA-fxjg-28fm-pfxh
2026-05-22 18:04:22 -07:00 · 2025-02-13 18:55:13 +00:00
parent 89116dd7c5
commit 57299b5607
13 changed files with 35 additions and 28 deletions
@@ -1,13 +1,13 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-3jxw-cv35-2mmv",
-  "modified": "2023-05-02T11:42:32Z",
+  "modified": "2025-02-13T18:54:07Z",
  "published": "2023-04-20T18:30:50Z",
  "aliases": [
    "CVE-2023-25601"
  ],
  "summary": "Apache DolphinScheduler's python gateway suffered from improper authentication",
-  "details": "On version 3.0.0 through 3.1.1, Apache DolphinScheduler's python gateway suffered from improper authentication: an attacker could use a socket bytes attack without authentication. This issue has been fixed from version 3.1.2 onwards. For users who use version 3.0.0 to 3.1.1, you can turn off the python-gateway function by changing the value `python-gateway.enabled=false` in configuration file `application.yaml`. If you are using the python gateway, please upgrade to version 3.1.2 or above.\n",
+  "details": "On version 3.0.0 through 3.1.1, Apache DolphinScheduler's python gateway suffered from improper authentication: an attacker could use a socket bytes attack without authentication. This issue has been fixed from version 3.1.2 onwards. For users who use version 3.0.0 to 3.1.1, you can turn off the python-gateway function by changing the value `python-gateway.enabled=false` in configuration file `application.yaml`. If you are using the python gateway, please upgrade to version 3.1.2 or above.",
  "severity": [
    {
      "type": "CVSS_V3",
@@ -1,13 +1,13 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-7hj9-rv74-5g92",
-  "modified": "2023-04-25T21:00:36Z",
+  "modified": "2025-02-13T18:53:59Z",
  "published": "2023-04-11T20:59:22Z",
  "aliases": [
    "CVE-2023-29013"
  ],
  "summary": "Traefik HTTP header parsing could cause a denial of service ",
-  "details": "### Impact\n\nThere is a vulnerability in [Go when parsing the HTTP headers](https://groups.google.com/g/golang-announce/c/Xdv6JL9ENs8/m/OV40vnafAwAJ), which impacts Traefik.\nHTTP header parsing could allocate substantially more memory than required to hold the parsed headers. This behavior could be exploited to cause a denial of service.\n\n### References\n\n- [CVE-2023-24534](https://www.cve.org/CVERecord?id=CVE-2023-24534)\n\n### Patches\n- https://github.com/traefik/traefik/releases/tag/v2.9.10\n- https://github.com/traefik/traefik/releases/tag/v2.10.0-rc2\n\n### Workarounds\n\nNo workaround.\n\n### For more information\n\nIf you have any questions or comments about this advisory, please [open an issue](https://github.com/traefik/traefik/issues).\n",
+  "details": "### Impact\n\nThere is a vulnerability in [Go when parsing the HTTP headers](https://groups.google.com/g/golang-announce/c/Xdv6JL9ENs8/m/OV40vnafAwAJ), which impacts Traefik.\nHTTP header parsing could allocate substantially more memory than required to hold the parsed headers. This behavior could be exploited to cause a denial of service.\n\n### References\n\n- [CVE-2023-24534](https://www.cve.org/CVERecord?id=CVE-2023-24534)\n\n### Patches\n- https://github.com/traefik/traefik/releases/tag/v2.9.10\n- https://github.com/traefik/traefik/releases/tag/v2.10.0-rc2\n\n### Workarounds\n\nNo workaround.\n\n### For more information\n\nIf you have any questions or comments about this advisory, please [open an issue](https://github.com/traefik/traefik/issues).",
  "severity": [
    {
      "type": "CVSS_V3",
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-qm2h-m799-86rc",
-  "modified": "2023-04-14T20:24:46Z",
+  "modified": "2025-02-13T18:54:03Z",
  "published": "2023-04-10T09:30:15Z",
  "aliases": [
    "CVE-2023-29215"
@@ -1,13 +1,13 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-rrhf-32rq-f28h",
-  "modified": "2023-04-14T20:24:31Z",
+  "modified": "2025-02-13T18:54:02Z",
  "published": "2023-04-10T09:30:15Z",
  "aliases": [
    "CVE-2023-29216"
  ],
  "summary": "Apache Linkis DatasourceManager module has deserialization vulnerability",
-  "details": "In Apache Linkis <=1.3.1, because the parameters are not effectively filtered, the attacker can use the MySQL data source and malicious parameters to configure a new data source to trigger a deserialization vulnerability, eventually leading to remote code execution. Users should upgrade their version of Linkis to version 1.3.2.\n",
+  "details": "In Apache Linkis <=1.3.1, because the parameters are not effectively filtered, the attacker can use the MySQL data source and malicious parameters to configure a new data source to trigger a deserialization vulnerability, eventually leading to remote code execution. Users should upgrade their version of Linkis to version 1.3.2.",
  "severity": [
    {
      "type": "CVSS_V3",
@@ -1,13 +1,13 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-rrm6-wvj7-cwh2",
-  "modified": "2024-10-28T14:30:18Z",
+  "modified": "2025-02-13T18:54:23Z",
  "published": "2023-04-21T20:24:21Z",
  "aliases": [
    "CVE-2023-30608"
  ],
  "summary": "sqlparse contains a regular expression that is vulnerable to Regular Expression Denial of Service",
-  "details": "### Impact\nThe SQL parser contains a regular expression that is vulnerable to [ReDoS](https://owasp.org/www-community/attacks/Regular_expression_Denial_of_Service_-_ReDoS) (Regular Expression Denial of Service). The vulnerability may lead to Denial of Service (DoS).\n\n### Patches\nThis issues has been fixed in sqlparse 0.4.4.\n\n### Workarounds\nNone. \n\n### References\nThis issue was discovered and reported by GHSL team member [@erik-krogh (Erik Krogh Kristensen)](https://github.com/erik-krogh).\n- Commit that introduced the vulnerability: e75e35869473832a1eb67772b1adfee2db11b85a\n",
+  "details": "### Impact\nThe SQL parser contains a regular expression that is vulnerable to [ReDoS](https://owasp.org/www-community/attacks/Regular_expression_Denial_of_Service_-_ReDoS) (Regular Expression Denial of Service). The vulnerability may lead to Denial of Service (DoS).\n\n### Patches\nThis issues has been fixed in sqlparse 0.4.4.\n\n### Workarounds\nNone. \n\n### References\nThis issue was discovered and reported by GHSL team member [@erik-krogh (Erik Krogh Kristensen)](https://github.com/erik-krogh).\n- Commit that introduced the vulnerability: e75e35869473832a1eb67772b1adfee2db11b85a",
  "severity": [
    {
      "type": "CVSS_V3",
@@ -1,13 +1,13 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-59hw-j9g6-mfg3",
-  "modified": "2024-11-19T20:11:00Z",
+  "modified": "2025-02-13T18:54:26Z",
  "published": "2023-05-02T09:30:17Z",
  "aliases": [
    "CVE-2023-32007"
  ],
  "summary": "Apache Spark UI vulnerable to Command Injection",
-  "details": "The Apache Spark UI offers the possibility to enable ACLs via the configuration option spark.acls.enable. With an authentication filter, this checks whether a user has access permissions to view or modify the application. If ACLs are enabled, a code path in HttpSecurityFilter can allow someone to perform impersonation by providing an arbitrary user name. A malicious user might then be able to reach a permission check function that will ultimately build a Unix shell command based on their input, and execute it. This will result in arbitrary shell command execution as the user Spark is currently running as. This issue was disclosed earlier as CVE-2022-33891, but incorrectly claimed version 3.1.3 (which has since gone EOL) would not be affected.\n\nNOTE: This vulnerability only affects products that are no longer supported by the maintainer.\n\nUsers are recommended to upgrade to a supported version of Apache Spark, such as version 3.4.0.\n\n\n",
+  "details": "The Apache Spark UI offers the possibility to enable ACLs via the configuration option spark.acls.enable. With an authentication filter, this checks whether a user has access permissions to view or modify the application. If ACLs are enabled, a code path in HttpSecurityFilter can allow someone to perform impersonation by providing an arbitrary user name. A malicious user might then be able to reach a permission check function that will ultimately build a Unix shell command based on their input, and execute it. This will result in arbitrary shell command execution as the user Spark is currently running as. This issue was disclosed earlier as CVE-2022-33891, but incorrectly claimed version 3.1.3 (which has since gone EOL) would not be affected.\n\nNOTE: This vulnerability only affects products that are no longer supported by the maintainer.\n\nUsers are recommended to upgrade to a supported version of Apache Spark, such as version 3.4.0.",
  "severity": [
    {
      "type": "CVSS_V3",
@@ -86,6 +86,10 @@
    {
      "type": "WEB",
      "url": "https://www.openwall.com/lists/oss-security/2023/05/02/1"
+    },
+    {
+      "type": "WEB",
+      "url": "http://www.openwall.com/lists/oss-security/2023/05/02/1"
    }
  ],
  "database_specific": {
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-f3wc-3vxv-xmvr",
-  "modified": "2024-09-24T15:31:50Z",
+  "modified": "2025-02-13T18:54:39Z",
  "published": "2023-05-24T17:28:26Z",
  "aliases": [
    "CVE-2023-32323"
@@ -1,13 +1,13 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-h475-7v3c-26q7",
-  "modified": "2023-05-11T14:06:29Z",
+  "modified": "2025-02-13T18:54:14Z",
  "published": "2023-05-03T21:30:18Z",
  "aliases": [
    "CVE-2023-25826"
  ],
  "summary": "Command injection in OpenTSDB",
-  "details": "Due to insufficient validation of parameters passed to the legacy HTTP query API, it is possible to inject crafted OS commands into multiple parameters and execute malicious code on the OpenTSDB host system. This exploit exists due to an incomplete fix that was made when this vulnerability was previously disclosed as CVE-2020-35476. Regex validation that was implemented to restrict allowed input to the query API does not work as intended, allowing crafted commands to bypass validation.\n\n",
+  "details": "Due to insufficient validation of parameters passed to the legacy HTTP query API, it is possible to inject crafted OS commands into multiple parameters and execute malicious code on the OpenTSDB host system. This exploit exists due to an incomplete fix that was made when this vulnerability was previously disclosed as CVE-2020-35476. Regex validation that was implemented to restrict allowed input to the query API does not work as intended, allowing crafted commands to bypass validation.",
  "severity": [
    {
      "type": "CVSS_V3",
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-j8r2-6x86-q33q",
-  "modified": "2024-03-12T17:11:27Z",
+  "modified": "2025-02-13T18:54:42Z",
  "published": "2023-05-22T20:36:32Z",
  "aliases": [
    "CVE-2023-32681"
@@ -20,11 +20,6 @@
        "ecosystem": "PyPI",
        "name": "requests"
      },
-      "ecosystem_specific": {
-        "affected_functions": [
-          "requests.sessions.SessionRedirectMixin.rebuild_proxies"
-        ]
-      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
@@ -1,13 +1,13 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-jchm-fm4q-c2fp",
-  "modified": "2024-11-19T20:06:06Z",
+  "modified": "2025-02-13T18:54:28Z",
  "published": "2023-05-08T12:30:29Z",
  "aliases": [
    "CVE-2023-25754"
  ],
  "summary": "Apache Airflow vulnerable to Privilege Context Switching Error",
-  "details": "Privilege Context Switching Error vulnerability in Apache Software Foundation Apache Airflow. This issue affects Apache Airflow: before 2.6.0.\n\n",
+  "details": "Privilege Context Switching Error vulnerability in Apache Software Foundation Apache Airflow. This issue affects Apache Airflow: before 2.6.0.",
  "severity": [
    {
      "type": "CVSS_V3",
@@ -71,6 +71,10 @@
    {
      "type": "WEB",
      "url": "https://www.openwall.com/lists/oss-security/2023/05/08/2"
+    },
+    {
+      "type": "WEB",
+      "url": "http://www.openwall.com/lists/oss-security/2023/05/08/2"
    }
  ],
  "database_specific": {
@@ -1,13 +1,13 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-qvq8-cw7f-m7m4",
-  "modified": "2023-06-03T00:39:55Z",
+  "modified": "2025-02-13T18:54:31Z",
  "published": "2023-05-25T09:30:25Z",
  "aliases": [
    "CVE-2022-46907"
  ],
  "summary": "Apache JSPWiki vulnerable to cross-site scripting on several plugins",
-  "details": "A carefully crafted request on several JSPWiki plugins could trigger an XSS vulnerability on Apache JSPWiki, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim. Apache JSPWiki users should upgrade to 2.12.0 or later.\n",
+  "details": "A carefully crafted request on several JSPWiki plugins could trigger an XSS vulnerability on Apache JSPWiki, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim. Apache JSPWiki users should upgrade to 2.12.0 or later.",
  "severity": [
    {
      "type": "CVSS_V3",
@@ -1,13 +1,13 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-fxjg-28fm-pfxh",
-  "modified": "2023-07-06T22:10:49Z",
+  "modified": "2025-02-13T18:54:17Z",
  "published": "2023-07-06T19:24:15Z",
  "aliases": [
    "CVE-2023-25504"
  ],
  "summary": "Apache Superset Server-Side Request Forgery vulnerability",
-  "details": "A malicious actor who has been authenticated and granted specific permissions in Apache Superset may use the import dataset feature in order to conduct Server-Side Request Forgery attacks and query internal resources on behalf of the server where Superset is deployed. This vulnerability exists in Apache Superset versions up to and including 2.0.1.\n",
+  "details": "A malicious actor who has been authenticated and granted specific permissions in Apache Superset may use the import dataset feature in order to conduct Server-Side Request Forgery attacks and query internal resources on behalf of the server where Superset is deployed. This vulnerability exists in Apache Superset versions up to and including 2.0.1.",
  "severity": [
    {
      "type": "CVSS_V3",
@@ -47,6 +47,10 @@
    {
      "type": "WEB",
      "url": "https://lists.apache.org/thread/tdnzkocfsqg2sbbornnp9g492fn4zhtx"
+    },
+    {
+      "type": "WEB",
+      "url": "http://www.openwall.com/lists/oss-security/2023/04/18/8"
    }
  ],
  "database_specific": {