netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-c429-5p7v-vgjp
GHSA-qj9p-jvmw-82rh
This commit is contained in:
advisory-database[bot]
2025-05-28 19:34:53 +00:00
parent bb6e36d392
commit 9478142c30
2 changed files with 11 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/github-reviewed/2022/09/GHSA-c429-5p7v-vgjp/GHSA-c429-5p7v-vgjp.json
+6 -2
View File
@@ -1,13 +1,13 @@
{
"schema_version": "1.4.0",
"id": "GHSA-c429-5p7v-vgjp",
"modified": "2022-09-29T14:13:31Z",
"modified": "2025-05-28T19:34:26Z",
"published": "2022-09-25T00:00:27Z",
"aliases": [
"CVE-2020-36604"
],
"summary": "hoek subject to prototype pollution via the clone function.",
"details": "hoek versions prior to 8.5.1, and 9.x prior to 9.0.3 are vulnerable to prototype pollution in the clone function. If an object with the __proto__ key is passed to clone() the key is converted to a prototype. This issue has been patched in version 9.0.3, and backported to 8.5.1. ",
"details": "hoek versions prior to 8.5.1, and 9.x prior to 9.0.3 are vulnerable to prototype pollution in the clone function. If an object with the __proto__ key is passed to clone() the key is converted to a prototype. This issue has been patched in version 9.0.3, and backported to 8.5.1.",
"severity": [
{
"type": "CVSS_V3",
@@ -89,6 +89,10 @@
{
"type": "WEB",
"url": "https://github.com/hapijs/hoek/commit/948baf98634a5c206875b67d11368f133034fa90"
},
{
"type": "WEB",
"url": "https://security.snyk.io/vuln/SNYK-JS-HAPIHOEK-548452%29"
}
],
"database_specific": {
advisories/github-reviewed/2022/09/GHSA-qj9p-jvmw-82rh/GHSA-qj9p-jvmw-82rh.json
+5 -3
View File
@@ -1,13 +1,13 @@
{
"schema_version": "1.4.0",
"id": "GHSA-qj9p-jvmw-82rh",
"modified": "2022-09-29T14:37:12Z",
"modified": "2025-05-28T19:33:40Z",
"published": "2022-09-25T00:00:26Z",
"aliases": [
"CVE-2022-26112"
],
"summary": "Apache Pinot has Groovy Function support enabled by default",
"details": "Pinot allows you to run any function using Apache Groovy scripts. In versions prior to 0.10.0, Pinot query endpoint and realtime ingestion layer has a vulnerability in unprotected environments due to groovy function support being enabled by default. This issue has been fixed by making function support disabled by default, in version 0.11.0. A potential workaround is to disable groovy script support. ",
"details": "Pinot allows you to run any function using Apache Groovy scripts. In versions prior to 0.10.0, Pinot query endpoint and realtime ingestion layer has a vulnerability in unprotected environments due to groovy function support being enabled by default. This issue has been fixed by making function support disabled by default, in version 0.11.0. A potential workaround is to disable groovy script support.",
"severity": [
{
"type": "CVSS_V3",
@@ -58,7 +58,9 @@
}
],
"database_specific": {
"cwe_ids": [],
"cwe_ids": [
"CWE-94"
],
"severity": "CRITICAL",
"github_reviewed": true,
"github_reviewed_at": "2022-09-29T14:37:12Z",