netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-77gc-fj98-665h
GHSA-f6mq-5m25-4r72
This commit is contained in:
advisory-database[bot]
2023-03-01 18:39:05 +00:00
parent b4b8a50fe6
commit dc3a17c61d
2 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/github-reviewed/2021/05/GHSA-77gc-fj98-665h/GHSA-77gc-fj98-665h.json
+2 -2
View File
@@ -1,13 +1,13 @@
{
"schema_version": "1.3.0",
"id": "GHSA-77gc-fj98-665h",
"modified": "2021-05-12T18:06:40Z",
"modified": "2023-03-01T18:38:32Z",
"published": "2021-05-18T19:15:09Z",
"aliases": [
"CVE-2016-9122"
],
"summary": "Signature Validation Bypass",
"details": "Go JOSE before 1.1.0 suffers from multiple signatures exploitation. The go-jose library supports messages with multiple signatures. However, when validating a signed message the API did not indicate which signature was valid, which could potentially lead to confusion. For example, users of the library might mistakenly read protected header values from an attached signature that was different from the one originally validated.",
"details": "Go JOSE before 1.1.0 suffers from multiple signatures exploitation. The go-jose library supports messages with multiple signatures. However, when validating a signed message the API did not indicate which signature was valid, which could potentially lead to confusion. For example, users of the library might mistakenly read protected header values from an attached signature that was different from the one originally validated",
"severity": [
{
"type": "CVSS_V3",
advisories/github-reviewed/2021/06/GHSA-f6mq-5m25-4r72/GHSA-f6mq-5m25-4r72.json
+2 -2
View File
@@ -1,12 +1,12 @@
{
"schema_version": "1.3.0",
"id": "GHSA-f6mq-5m25-4r72",
"modified": "2021-06-14T19:11:50Z",
"modified": "2023-03-01T18:37:05Z",
"published": "2021-06-15T16:08:16Z",
"aliases": [
"CVE-2021-20329"
],
"summary": "Improper Validation of Specified Type of Input",
"summary": "Improper Input Validation",
"details": "Specific cstrings input may not be properly validated in the MongoDB Go Driver when marshalling Go objects into BSON. A malicious user could use a Go object with specific string to potentially inject additional fields into marshalled documents. This issue affects all MongoDB GO Drivers up to (and including) 1.5.0.",
"severity": [
{