Advisory Database Sync

2026-05-22 18:04:22 -07:00 · 2024-12-01 05:16:19 +00:00
parent b2c6a300d9
commit cc393d4080
989 changed files with 1671 additions and 5013 deletions
@@ -3,9 +3,7 @@
  "id": "GHSA-27v7-qhfv-rqq8",
  "modified": "2021-08-31T20:56:47Z",
  "published": "2019-05-30T17:26:30Z",
-  "aliases": [
-
-  ],
+  "aliases": [],
  "summary": "Insecure Credential Storage in web3",
  "details": "All versions of `web3` are vulnerable to Insecure Credential Storage. The package stores encrypted wallets in local storage and requires a password to load the wallet. Once the wallet is loaded, the private key is accessible via LocalStorage. Exploiting this vulnerability likely requires a Cross-Site Scripting vulnerability to access the private key.\n\n\n## Recommendation\n\nNo fix is currently available. Consider using an alternative module until a fix is made available.",
  "severity": [
@@ -54,9 +52,7 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [
-
-    ],
+    "cwe_ids": [],
    "severity": "LOW",
    "github_reviewed": true,
    "github_reviewed_at": "2019-05-30T17:25:54Z",
@@ -3,14 +3,10 @@
  "id": "GHSA-2hwp-g4g7-mwwj",
  "modified": "2020-08-31T18:35:05Z",
  "published": "2019-05-29T20:25:35Z",
-  "aliases": [
-
-  ],
+  "aliases": [],
  "summary": "Reflected Cross-Site Scripting in jquery.terminal",
  "details": "Versions of `jquery.terminal` prior to 1.21.0 are vulnerable to Reflected Cross-Site Scripting. If the application has either of the options `anyLinks` or `invokeMethods` set to true, the application may execute arbitrary JavaScript through crafted malicious payloads due to insufficient sanitization.\n\n\n## Recommendation\n\nUpgrade to version 1.21.0 or later",
-  "severity": [
-
-  ],
+  "severity": [],
  "affected": [
    {
      "package": {
@@ -3,14 +3,10 @@
  "id": "GHSA-2xv3-h762-ccxv",
  "modified": "2020-08-31T18:31:05Z",
  "published": "2019-05-29T19:18:02Z",
-  "aliases": [
-
-  ],
+  "aliases": [],
  "summary": "Out-of-bounds Read in concat-with-sourcemaps",
  "details": "Versions of `concat-with-sourcemaps` before 1.0.6 allocates uninitialized Buffers when a number is passed as a separator.\n\n\n## Recommendation\n\nUpdate to version 1.0.6 or later.",
-  "severity": [
-
-  ],
+  "severity": [],
  "affected": [
    {
      "package": {
@@ -3,14 +3,10 @@
  "id": "GHSA-6qh5-wx38-q92g",
  "modified": "2020-08-31T18:22:04Z",
  "published": "2019-05-30T17:15:59Z",
-  "aliases": [
-
-  ],
+  "aliases": [],
  "summary": "Directory Traversal in ltt.js",
  "details": "Affected versions of `ltt.js` resolve relative file paths, resulting in a directory traversal vulnerability. A malicious actor can use this vulnerability to access files outside of the intended directory root, which may result in the disclosure of private files on the vulnerable system.\n\nExample request:\n```\nGET /../../../../../../../../../../etc/passwd HTTP/1.1\nhost:foo\n```\n\n\n## Recommendation\n\nNo patch is available for this vulnerability.\n\nIt is recommended that the package is only used for local development, and if the functionality is needed for production, a different package is used instead.",
-  "severity": [
-
-  ],
+  "severity": [],
  "affected": [
    {
      "package": {
@@ -3,14 +3,10 @@
  "id": "GHSA-7jfh-2xc9-ccv7",
  "modified": "2020-08-31T18:29:45Z",
  "published": "2019-05-31T23:46:40Z",
-  "aliases": [
-
-  ],
+  "aliases": [],
  "summary": "Cross-Site Scripting in public",
  "details": "All versions of `public` are vulnerable to stored cross-site scripting (XSS). \n\n\n## Recommendation\n\nNo fix is currently available for this vulnerability. It is our recommendation to not install or use this module at this time.",
-  "severity": [
-
-  ],
+  "severity": [],
  "affected": [
    {
      "package": {
@@ -3,14 +3,10 @@
  "id": "GHSA-87mg-h5r3-hw88",
  "modified": "2021-09-16T21:01:13Z",
  "published": "2019-05-30T17:23:28Z",
-  "aliases": [
-
-  ],
+  "aliases": [],
  "summary": "Cross-Site Scripting in bootbox",
  "details": "All version of `bootbox` are vulnerable to Cross-Site Scripting. The package does not sanitize user input in the provided dialog boxes, allowing attackers to inject HTML code and execute arbitrary JavaScript.\n\n\n## Recommendation\n\nSanitize user input being passed to `bootbox` or consider using an alternative package.",
-  "severity": [
-
-  ],
+  "severity": [],
  "affected": [
    {
      "package": {
@@ -3,14 +3,10 @@
  "id": "GHSA-jj6g-7j8p-7gf2",
  "modified": "2020-08-31T18:29:43Z",
  "published": "2019-05-30T21:03:24Z",
-  "aliases": [
-
-  ],
+  "aliases": [],
  "summary": "Cross-Site Scripting in bracket-template",
  "details": "All versions of `bracket-template` are vulnerable to stored cross-site scripting (XSS). This is exploitable when a variable passed in via a GET parameter is used in a template.\n\n\n## Recommendation\n\nNo fix is currently available for this vulnerability. It is our recommendation to not install or use this module at this time.",
-  "severity": [
-
-  ],
+  "severity": [],
  "affected": [
    {
      "package": {
@@ -3,14 +3,10 @@
  "id": "GHSA-p72p-rjr2-r439",
  "modified": "2020-08-31T18:35:03Z",
  "published": "2019-05-29T20:24:02Z",
-  "aliases": [
-
-  ],
+  "aliases": [],
  "summary": "Server-Side Request Forgery in terriajs-server",
  "details": "Versions of `terriajs-server`prior to 2.7.4 are vulnerable to Server-Side Request Forgery (SSRF). If an attacker has access to a server whitelisted by the terriajs-server proxy or if the attacker is able to modify the DNS records of a domain whitelisted by the terriajs-server proxy, the attacker can use the terriajs-server proxy to access any HTTP-accessible resources that are accessible to the server, including private resources in the hosting environment.\n\n\n## Recommendation\n\nUpgrade to version 2.7.4 or later.",
-  "severity": [
-
-  ],
+  "severity": [],
  "affected": [
    {
      "package": {
@@ -8,9 +8,7 @@
  ],
  "summary": "Command Injection in fs-git",
  "details": "Affected versions of `fs-git` do not sanitize strings passed into the `buildCommand` method, resulting in arbitrary code execution.\n\n\n## Recommendation\n\nUpdate to version 1.0.2 or later. ",
-  "severity": [
-
-  ],
+  "severity": [],
  "affected": [
    {
      "package": {
@@ -3,9 +3,7 @@
  "id": "GHSA-2pr6-76vf-7546",
  "modified": "2021-08-04T21:32:56Z",
  "published": "2019-06-05T14:35:29Z",
-  "aliases": [
-
-  ],
+  "aliases": [],
  "summary": "Denial of Service in js-yaml",
  "details": "Versions of `js-yaml` prior to 3.13.0 are vulnerable to Denial of Service. By parsing a carefully-crafted YAML file, the node process stalls and may exhaust system resources leading to a Denial of Service.\n\n\n## Recommendation\n\nUpgrade to version 3.13.0.",
  "severity": [
@@ -3,9 +3,7 @@
  "id": "GHSA-3fc5-9x9m-vqc4",
  "modified": "2021-08-04T21:25:59Z",
  "published": "2019-06-03T17:31:32Z",
-  "aliases": [
-
-  ],
+  "aliases": [],
  "summary": "Privilege Escalation in express-cart",
  "details": "Versions of `express-cart` before 1.1.6 are vulnerable to privilege escalation. This vulnerability can be exploited so that normal users can escalate their privilege and add new administrator users.\n\n\n## Recommendation\n\nUpdate to version 1.1.6 or later.",
  "severity": [
@@ -58,9 +56,7 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [
-
-    ],
+    "cwe_ids": [],
    "severity": "CRITICAL",
    "github_reviewed": true,
    "github_reviewed_at": "2019-06-03T17:30:55Z",
@@ -3,9 +3,7 @@
  "id": "GHSA-3p92-886g-qxpq",
  "modified": "2021-08-04T21:27:04Z",
  "published": "2019-06-04T15:42:32Z",
-  "aliases": [
-
-  ],
+  "aliases": [],
  "summary": "Remote Memory Exposure in floody",
  "details": "Versions of `floody` before 0.1.1 are vulnerable to remote memory exposure.\n\n.write(number)` in the affected `floody` versions passes a number to Buffer constructor, appending a chunk of uninitialized memory.\n\nProof of Concept: \n\n```\nvar f = require('floody')(process.stdout); \nf.write(USERSUPPLIEDINPUT); \n'f.stop();\n\n\n## Recommendation\n\nUpdate to version 0.1.1 or later.",
  "severity": [
@@ -3,9 +3,7 @@
  "id": "GHSA-3xc7-xg67-pw99",
  "modified": "2021-08-04T20:54:45Z",
  "published": "2019-06-05T20:43:10Z",
-  "aliases": [
-
-  ],
+  "aliases": [],
  "summary": "Sensitive Data Exposure in sequelize-cli",
  "details": "Versions of `sequelize-cli` prior to 5.5.0 are vulnerable to Sensitive Data Exposure. The function `filteredURL()` does not properly sanitize the `config.password` value which may cause passwords with special characters to be logged in plain text.\n\n\n## Recommendation\n\nUpgrade to version 5.5.0 or later.",
  "severity": [
@@ -3,14 +3,10 @@
  "id": "GHSA-4859-gpc7-4j66",
  "modified": "2021-08-04T20:55:57Z",
  "published": "2019-06-05T21:24:29Z",
-  "aliases": [
-
-  ],
+  "aliases": [],
  "summary": "Command Injection in dot",
  "details": "All versions of dot are vulnerable to Command Injection. The template compilation may execute arbitrary commands if an attacker can inject code in the template or if a Prototype Pollution-like vulnerability can be exploited to alter an Object's prototype.",
-  "severity": [
-
-  ],
+  "severity": [],
  "affected": [
    {
      "package": {
@@ -3,14 +3,10 @@
  "id": "GHSA-74cp-qw7f-7hpw",
  "modified": "2020-08-31T18:36:24Z",
  "published": "2019-06-05T14:10:23Z",
-  "aliases": [
-
-  ],
+  "aliases": [],
  "summary": "Path Traversal in statics-server",
  "details": "All versions of `statics-server` are vulnerable to Path Traversal.  Due to insufficient input sanitization, attackers can access server files by using relative paths. \n\n\n## Recommendation\n\nNo fix is currently available. Consider using an alternative module until a fix is made available.\n",
-  "severity": [
-
-  ],
+  "severity": [],
  "affected": [
    {
      "package": {
@@ -3,9 +3,7 @@
  "id": "GHSA-83rx-c8cr-6j8q",
  "modified": "2021-08-04T21:33:58Z",
  "published": "2019-06-05T20:48:55Z",
-  "aliases": [
-
-  ],
+  "aliases": [],
  "summary": "Insecure Default Configuration in tesseract.js",
  "details": "Versions of `tesseract.js` prior to 1.0.19 default to using a third-party proxy.  Requests may be proxied through `crossorigin.me` which clearly states is not suitable for production use. This may lead to instability and privacy violations.\n\n\n## Recommendation\n\nUpgrade to version 1.0.19 or later.",
  "severity": [
@@ -3,9 +3,7 @@
  "id": "GHSA-86p3-4gfq-38f2",
  "modified": "2021-08-04T21:31:03Z",
  "published": "2019-06-05T14:10:34Z",
-  "aliases": [
-
-  ],
+  "aliases": [],
  "summary": "Denial of Service in url-relative",
  "details": "All versions of `url-relative` are vulnerable to Denial of Service. If the values `to` and `from` are equal, the function hangs and never returns. This may cause a Denial of Service.\n\n\n## Recommendation\n\nNo fix is currently available. Consider using an alternative module until a fix is made available.",
  "severity": [
@@ -3,14 +3,10 @@
  "id": "GHSA-f698-m2v9-5fh3",
  "modified": "2020-08-31T18:35:50Z",
  "published": "2019-06-04T20:11:44Z",
-  "aliases": [
-
-  ],
+  "aliases": [],
  "summary": "Command Injection in opencv",
  "details": "Versions of `opencv`prior to 6.1.0 are vulnerable to Command Injection. The utils/ script find-opencv.js does not validate user input allowing attackers to execute arbitrary commands.\n\n\n## Recommendation\n\nUpgrade to version 6.1.0.\n",
-  "severity": [
-
-  ],
+  "severity": [],
  "affected": [
    {
      "package": {
@@ -3,14 +3,10 @@
  "id": "GHSA-m734-r4g6-34f9",
  "modified": "2021-08-04T20:47:58Z",
  "published": "2019-06-04T19:36:17Z",
-  "aliases": [
-
-  ],
+  "aliases": [],
  "summary": "NoSQL Injection in loopback-connector-mongodb",
  "details": "Versions of `loopback-connector-mongodb` before 3.6.0 are vulnerable to NoSQL injection.\n\nMongoDB Connector for LoopBack fails to properly sanitize a filter passed to query the database by allowing the dangerous `$where` property to be passed to the MongoDB Driver. The Driver allows the special `$where` property in a filter to execute JavaScript (client can pass in a malicious script) on the database Driver. This is an [intended feature of MongoDB](https://docs.mongodb.com/manual/core/server-side-javascript/) unless disabled ([instructions here](https://docs.mongodb.com/manual/core/server-side-javascript/#disable-server-side-js)).\n\nA proof of concept malicious query:\n\n```\nGET /POST filter={\"where\": {\"$where\": \"function(){sleep(5000); return this.title.contains('Hello');}\"}}\n```\n\nThe above makes the database sleep for 5 seconds and then returns all “Posts” with the title containing the word `Hello`.\n\n\n\n\n## Recommendation\n\nUpdate to version 3.6.0 or later.",
-  "severity": [
-
-  ],
+  "severity": [],
  "affected": [
    {
      "package": {
@@ -3,14 +3,10 @@
  "id": "GHSA-m8fw-534v-xm85",
  "modified": "2020-08-31T18:31:00Z",
  "published": "2019-06-04T15:43:29Z",
-  "aliases": [
-
-  ],
+  "aliases": [],
  "summary": "Cross-Site Scripting (XSS) in cloudcmd",
  "details": "Versions of `cloudcmd` before 9.1.6 are vulnerable to cross-site scripting (XSS) when listing files in a directory. The attacker must control the name of a file for this vulnerability to be exploitable.\n\n\n## Recommendation\n\nUpdate to version 9.1.6 or later.",
-  "severity": [
-
-  ],
+  "severity": [],
  "affected": [
    {
      "package": {
--- a/Show More
+++ b/Show More