Advisory Database Sync

2026-05-22 18:04:22 -07:00 · 2024-12-01 05:16:57 +00:00
parent cc393d4080
commit b979e4dca5
979 changed files with 1676 additions and 5028 deletions
@@ -3,14 +3,10 @@
  "id": "GHSA-28hp-fgcr-2r4h",
  "modified": "2021-02-24T18:32:36Z",
  "published": "2019-06-27T17:25:42Z",
-  "aliases": [
-
-  ],
+  "aliases": [],
  "summary": "Cross-Site Scripting via JSONP",
  "details": "JSONP allows untrusted resource URLs, which provides a vector for attack by malicious actors.",
-  "severity": [
-
-  ],
+  "severity": [],
  "affected": [
    {
      "package": {
@@ -3,14 +3,10 @@
  "id": "GHSA-49r3-3h96-rwj6",
  "modified": "2020-08-31T18:41:54Z",
  "published": "2019-06-13T19:09:31Z",
-  "aliases": [
-
-  ],
+  "aliases": [],
  "summary": "Cross-Site Scripting in ids-enterprise",
  "details": "Versions of `ids-enterprise` prior to 4.18.2 are vulnerable to Cross-Site Scripting (XSS). The `soho-dropdown` component does not properly encode its output and may allow attackers to execute arbitrary JavaScript.\n\n\n## Recommendation\n\nUpgrade to version 4.18.2 or later",
-  "severity": [
-
-  ],
+  "severity": [],
  "affected": [
    {
      "package": {
@@ -3,14 +3,10 @@
  "id": "GHSA-4qhx-g9wp-g9m6",
  "modified": "2021-09-16T21:00:23Z",
  "published": "2019-06-14T16:09:01Z",
-  "aliases": [
-
-  ],
+  "aliases": [],
  "summary": "Failure to sanitize quotes which can lead to sql injection in squel",
  "details": "All versions of `squel` are vulnerable to sql injection.\n\nThe `squel` package does not properly escape user provided input when provided using the `setFields` method. This could lead to sql injection if the query was then executed.\n\nProof of concept demonstrating the injection of a single quote into a generated sql statement from user provided input.\n```\n> console.log(squel.insert().into('buh').setFields({foo: \"bar'baz\"}).toString());\nINSERT INTO buh (foo) VALUES ('bar'baz')\n```\n\n\n## Recommendation\n\nThere is no fix at this time and the issue has been reported publicly. Consider using another query builder that provides strong guarantees for input sanitization to prevent sql injection attacks.",
-  "severity": [
-
-  ],
+  "severity": [],
  "affected": [
    {
      "package": {
@@ -3,14 +3,10 @@
  "id": "GHSA-6394-6h9h-cfjg",
  "modified": "2021-02-25T17:23:12Z",
  "published": "2019-06-07T21:12:35Z",
-  "aliases": [
-
-  ],
+  "aliases": [],
  "summary": "Regular Expression Denial of Service",
  "details": "A Regular Expression vulnerability was found in nwmatcher before 1.4.4. The fix replacing multiple repeated instances of the \"\\s*\" pattern.",
-  "severity": [
-
-  ],
+  "severity": [],
  "affected": [
    {
      "package": {
@@ -3,9 +3,7 @@
  "id": "GHSA-68gr-cmcp-g3mj",
  "modified": "2021-08-16T23:34:10Z",
  "published": "2019-06-14T16:39:31Z",
-  "aliases": [
-
-  ],
+  "aliases": [],
  "summary": "Directory Traversal in lactate",
  "details": "A crafted `GET` request can be leveraged to traverse the directory structure of a host using the lactate web server package, and request arbitrary files outside of the specified web root. This allows for a remote attacker to gain access to arbitrary files on the filesystem that the process has access to read.\n\nMitigating factors:\nOnly files that the user running `lactate` has permission to read will be accessible via this vulnerability.\n\n\n[Proof of concept](https://hackerone.com/reports/296645):\nPlease globally install the `lactate` package and `cd` to a directory you wish to serve assets from. Next, run `lactate -p 8081` to start serving files from this location.\n\nThe following cURL request can be used to demonstrate this vulnerability by requesting the target `/etc/passwd` file:\n\n```\ncurl \"http://127.0.0.1:8081/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd\"\n```\n```\nroot:x:0:0:root:/root:/bin/bash\ndaemon:x:1:1:daemon:/usr/sbin:/usr/sbin/nologin\nbin:x:2:2:bin:/bin:/usr/sbin/nologin\nsys:x:3:3:sys:/dev:/usr/sbin/nologin\n[...]\n```\n\n\n## Recommendation\n\nAs there is currently no fix for this issue selecting an alternative static web server would be the best choice.",
  "severity": [
@@ -3,9 +3,7 @@
  "id": "GHSA-74cr-77xc-8g6r",
  "modified": "2021-08-16T15:28:22Z",
  "published": "2019-06-13T20:37:39Z",
-  "aliases": [
-
-  ],
+  "aliases": [],
  "summary": "Prototype Pollution in @apollo/gateway",
  "details": "Versions of `@apollo/gateway` prior to 0.6.2 are vulnerable to Prototype Pollution. The package uses deepMerge() to merge objects, which may allow attackers to alter the Object prototype through queries with GraphQL aliases. Carefully constructed payloads can override properties of all objects in the application. This may lead to Denial of Service or may be chained with other vulnerabilities leading to Remote Code Execution.\n\n\n## Recommendation\n\nUpgrade to version 0.6.2 or later.\n",
  "severity": [
@@ -3,9 +3,7 @@
  "id": "GHSA-8948-ffc6-jg52",
  "modified": "2021-08-04T20:58:53Z",
  "published": "2019-06-06T15:32:21Z",
-  "aliases": [
-
-  ],
+  "aliases": [],
  "summary": "Insecure Default Configuration in redbird",
  "details": "Versions of `redbird` prior to 0.9.1 have a vulnerable default configuration of allowing TLS 1.0 connections on `lib/proxy.js`. The package does not provide an option to disable TLS 1.0 which is deprecated and vulnerable.\n\n\n## Recommendation\n\nUpgrade to version 0.9.1 or later.",
  "severity": [
@@ -3,14 +3,10 @@
  "id": "GHSA-8v5f-hp78-jgxq",
  "modified": "2020-08-31T18:37:26Z",
  "published": "2019-06-06T15:30:33Z",
-  "aliases": [
-
-  ],
+  "aliases": [],
  "summary": "Signature Verification Bypass in jwt-simple",
  "details": "Versions of `jwt-simple` prior to 0.5.3 are vulnerable to Signature Verification Bypass. If no algorithm is specified in the `decode()` function, the packages uses the algorithm in the JWT to decode tokens. This allows an attacker to create a HS256 (symmetric algorithm) JWT with the server's public key as secret, and the package will verify it as HS256 instead of RS256 (asymmetric algorithm).\n\n\n## Recommendation\n\nUpgrade to version 0.5.3 or later.",
-  "severity": [
-
-  ],
+  "severity": [],
  "affected": [
    {
      "package": {
@@ -3,9 +3,7 @@
  "id": "GHSA-984p-xq9m-4rjw",
  "modified": "2021-08-04T21:03:16Z",
  "published": "2019-06-07T21:01:53Z",
-  "aliases": [
-
-  ],
+  "aliases": [],
  "summary": "Rate Limiting Bypass in express-brute",
  "details": "All versions of `express-brute` are vulnerable to Rate Limiting Bypass. Concurrent requests may lead to race conditions that cause the package to incorrectly count requests. This may allow an attacker to bypass the rate limiting provided by the package and execute requests without limiting.\n\n\n## Recommendation\n\nNo fix is currently available. Consider using an alternative module until a fix is made available.",
  "severity": [
@@ -3,14 +3,10 @@
  "id": "GHSA-crfx-5phg-hmw9",
  "modified": "2020-08-31T18:41:52Z",
  "published": "2019-06-13T18:59:12Z",
-  "aliases": [
-
-  ],
+  "aliases": [],
  "summary": "Cross-Site Scripting in ids-enterprise",
  "details": "Versions of `ids-enterprise` prior to 4.18.2 are vulnerable to Cross-Site Scripting (XSS). Script tags in the `soho-autocomplete` component are not properly encoded and may allow attackers to execute arbitrary JavaScript.\n\n\n## Recommendation\n\nUpgrade to version 4.18.2 or later",
-  "severity": [
-
-  ],
+  "severity": [],
  "affected": [
    {
      "package": {
@@ -3,9 +3,7 @@
  "id": "GHSA-f7qw-5pvg-mmwp",
  "modified": "2021-08-16T14:36:47Z",
  "published": "2019-06-13T18:58:44Z",
-  "aliases": [
-
-  ],
+  "aliases": [],
  "summary": "Prototype Pollution in lutils-merge",
  "details": "All versions of `lutils-merge` are vulnerable to Prototype Pollution. The merge() function fails to prevent user input to alter an Object's prototype, allowing attackers to modify override properties of all objects in the application. This may lead to Denial of Service or may be chained with other vulnerabilities leading to Remote Code Execution.\n\n\n## Recommendation\n\nThe package is deprecated and no fixes are available. Consider using an alternative package.\n",
  "severity": [
@@ -3,9 +3,7 @@
  "id": "GHSA-g95f-p29q-9xw4",
  "modified": "2021-08-04T21:35:07Z",
  "published": "2019-06-06T15:30:30Z",
-  "aliases": [
-
-  ],
+  "aliases": [],
  "summary": "Regular Expression Denial of Service in braces",
  "details": "Versions of `braces` prior to 2.3.1 are vulnerable to Regular Expression Denial of Service (ReDoS). Untrusted input may cause catastrophic backtracking while matching regular expressions. This can cause the application to be unresponsive leading to Denial of Service.\n\n\n## Recommendation\n\nUpgrade to version 2.3.1 or higher.",
  "severity": [
@@ -3,9 +3,7 @@
  "id": "GHSA-gm9g-2g8v-fvxj",
  "modified": "2021-09-16T20:59:20Z",
  "published": "2019-06-06T15:32:28Z",
-  "aliases": [
-
-  ],
+  "aliases": [],
  "summary": "Prototype Pollution in upmerge",
  "details": "All versions of `upmerge` are vulnerable to Prototype Pollution. The merge() function fails to prevent user input to alter an Object's prototype, allowing attackers to modify override properties of all objects in the application. This may lead to Denial of Service or may be chained with other vulnerabilities leading to Remote Code Execution.\n\n\n## Recommendation\n\nNo fix is currently available. Consider using an alternative module until a fix is made available.\n",
  "severity": [
@@ -3,14 +3,10 @@
  "id": "GHSA-hpfq-8wx8-cgqw",
  "modified": "2020-08-31T18:41:56Z",
  "published": "2019-06-13T18:59:18Z",
-  "aliases": [
-
-  ],
+  "aliases": [],
  "summary": "Cross-Site Scripting in ids-enterprise",
  "details": "Versions of `ids-enterprise` prior to 4.18.2 are vulnerable to Cross-Site Scripting (XSS). The `modal` component fails to sanitize input to the `title` attribute, which may allow attackers to execute arbitrary JavaScript.\n\n\n## Recommendation\n\nUpgrade to version 4.18.2 or later",
-  "severity": [
-
-  ],
+  "severity": [],
  "affected": [
    {
      "package": {
@@ -3,9 +3,7 @@
  "id": "GHSA-j9f8-8h89-j69x",
  "modified": "2021-08-04T21:06:49Z",
  "published": "2019-06-11T16:16:34Z",
-  "aliases": [
-
-  ],
+  "aliases": [],
  "summary": "Remote Code Execution in node-os-utils",
  "details": "Versions of `node-os-utils` prior to 1.1.0 are vulnerable to Remote Code Execution. Due to insufficient input validation an attacker could run arbitrary commands on the server thus rendering the package vulnerable to Remote Code Execution.\n\n\n## Recommendation\n\nUpgrade to version 1.1.0 or later.",
  "severity": [
@@ -8,9 +8,7 @@
  ],
  "summary": "Out-of-bounds Read in stringstream",
  "details": "All versions of `stringstream` are vulnerable to out-of-bounds read as it allocates uninitialized Buffers when number is passed in input stream on Node.js 4.x and below.\n\n\n## Recommendation\n\nNo fix is currently available for this vulnerability. It is our recommendation to not install or use this module if user input is being passed in to `stringstream`.",
-  "severity": [
-
-  ],
+  "severity": [],
  "affected": [
    {
      "package": {
@@ -3,9 +3,7 @@
  "id": "GHSA-pm52-wwrw-c282",
  "modified": "2021-08-16T14:32:10Z",
  "published": "2019-06-13T18:59:06Z",
-  "aliases": [
-
-  ],
+  "aliases": [],
  "summary": "Command Injection in wiki-plugin-datalog",
  "details": "Versions of `wiki-plugin-datalog` prior to 0.1.6 are vulnerable to Command Injection. The package failed to sanitize URLs on the curl endpoint, allowing attackers to inject commands and possibly achieving Remote Code Execution on the system.\n\n\n## Recommendation\n\nUpgrade to version 0.1.6 or later.",
  "severity": [
@@ -3,14 +3,10 @@
  "id": "GHSA-qx4v-6gc5-f2vv",
  "modified": "2021-02-25T17:20:28Z",
  "published": "2019-06-20T14:32:56Z",
-  "aliases": [
-
-  ],
+  "aliases": [],
  "summary": "Regular Expression Denial of Service",
  "details": "A Regular Expression Denial of Service vulnerability was discovered in esm before 3.1.0. The issue is that esm's find-indexes is using the unescaped identifiers in a regex, which, in this case, causes an infinite loop.",
-  "severity": [
-
-  ],
+  "severity": [],
  "affected": [
    {
      "package": {
@@ -3,14 +3,10 @@
  "id": "GHSA-rv49-54qp-fw42",
  "modified": "2020-08-31T18:36:18Z",
  "published": "2019-06-06T15:30:20Z",
-  "aliases": [
-
-  ],
+  "aliases": [],
  "summary": "Path Traversal in servey",
  "details": "Versions of `servey` prior to 3.x are vulnerable to Path Traversal.  Due to insufficient input sanitization, attackers can access server files by using relative paths. \n\n\n## Recommendation\n\nUpgrade to the latest version",
-  "severity": [
-
-  ],
+  "severity": [],
  "affected": [
    {
      "package": {
@@ -3,14 +3,10 @@
  "id": "GHSA-v2p6-4mp7-3r9v",
  "modified": "2020-08-31T18:34:16Z",
  "published": "2019-06-14T16:26:22Z",
-  "aliases": [
-
-  ],
+  "aliases": [],
  "summary": "Regular Expression Denial of Service in underscore.string",
  "details": "Versions of `underscore.string` prior to *3.3.5* are vulnerable to Regular Expression Denial of Service (ReDoS).\n\nThe function `unescapeHTML` is vulnerable to ReDoS due to an overly-broad regex. The slowdown is approximately 2s for 50,000 characters but grows exponentially with larger inputs.\n\n\n## Recommendation\n\nUpgrade to version 3.3.5 or higher.",
-  "severity": [
-
-  ],
+  "severity": [],
  "affected": [
    {
      "package": {
--- a/Show More
+++ b/Show More