netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-9mc6-vgmq-x6xf
GHSA-c65p-x677-fgj6
This commit is contained in:
advisory-database[bot]
2025-05-29 21:37:09 +00:00
parent 94b13c7423
commit 6fcb410b97
2 changed files with 7 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/github-reviewed/2022/09/GHSA-9mc6-vgmq-x6xf/GHSA-9mc6-vgmq-x6xf.json
+2 -2
View File
@@ -1,13 +1,13 @@
{
"schema_version": "1.4.0",
"id": "GHSA-9mc6-vgmq-x6xf",
"modified": "2022-12-06T22:31:23Z",
"modified": "2025-05-29T21:35:54Z",
"published": "2022-09-22T00:00:28Z",
"aliases": [
"CVE-2022-41238"
],
"summary": "Lack of authentication mechanism in Jenkins DotCi Plugin webhook",
"details": "DotCi Plugin provides a webhook endpoint at `/githook/` that can be used to trigger builds of the job for a GitHub repository.\n\nIn DotCi Plugin 2.40.00 and earlier, this endpoint can be accessed without authentication.\n\nThis allows unauthenticated attackers to trigger builds of jobs corresponding to the attacker-specified repository for attacker-specified commits.\n\nThis plugin has been suspended. ",
"details": "DotCi Plugin provides a webhook endpoint at `/githook/` that can be used to trigger builds of the job for a GitHub repository.\n\nIn DotCi Plugin 2.40.00 and earlier, this endpoint can be accessed without authentication.\n\nThis allows unauthenticated attackers to trigger builds of jobs corresponding to the attacker-specified repository for attacker-specified commits.\n\nThis plugin has been suspended.",
"severity": [
{
"type": "CVSS_V3",
advisories/github-reviewed/2025/05/GHSA-c65p-x677-fgj6/GHSA-c65p-x677-fgj6.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-c65p-x677-fgj6",
"modified": "2025-05-29T21:27:46Z",
"modified": "2025-05-29T21:36:24Z",
"published": "2025-05-28T18:03:41Z",
"aliases": [
"CVE-2025-46722"
@@ -52,6 +52,10 @@
"type": "WEB",
"url": "https://github.com/vllm-project/vllm/commit/99404f53c72965b41558aceb1bc2380875f5d848"
},
{
"type": "WEB",
"url": "https://github.com/pypa/advisory-database/tree/main/vulns/vllm/PYSEC-2025-43.yaml"
},
{
"type": "PACKAGE",
"url": "https://github.com/vllm-project/vllm"