netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-8hvf-h3fh-qgpv
GHSA-cpgh-chqx-qm3c
GHSA-hx59-p22r-49rv
This commit is contained in:
advisory-database[bot]
2024-12-15 06:34:35 +00:00
parent b31a498ae7
commit ebe42236b5
3 changed files with 111 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2024/12/GHSA-8hvf-h3fh-qgpv/GHSA-8hvf-h3fh-qgpv.json
+37
View File
@@ -0,0 +1,37 @@
{
"schema_version": "1.4.0",
"id": "GHSA-8hvf-h3fh-qgpv",
"modified": "2024-12-15T06:32:50Z",
"published": "2024-12-15T06:32:50Z",
"aliases": [
"CVE-2024-56082"
],
"details": "ChatBar.tsx in Lumos before 1.0.17 parses raw HTML in Markdown because the markdown-to-jsx package is used without disableParsingRawHTML set to true.",
"severity": [],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-56082"
},
{
"type": "WEB",
"url": "https://github.com/andrewnguonly/Lumos/issues/193"
},
{
"type": "WEB",
"url": "https://github.com/andrewnguonly/Lumos/releases/tag/1.0.17"
},
{
"type": "WEB",
"url": "https://github.com/quantizor/markdown-to-jsx/blob/4fa87d89ad87f97b2d9e56cb969d12f9a838f3ac/README.md?plain=1#L535-L537"
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-12-15T05:15:05Z"
}
}
advisories/unreviewed/2024/12/GHSA-cpgh-chqx-qm3c/GHSA-cpgh-chqx-qm3c.json
+29
View File
@@ -0,0 +1,29 @@
{
"schema_version": "1.4.0",
"id": "GHSA-cpgh-chqx-qm3c",
"modified": "2024-12-15T06:32:50Z",
"published": "2024-12-15T06:32:50Z",
"aliases": [
"CVE-2024-55969"
],
"details": "DocIO in Syncfusion Essential Studio for ASP.NET MVC before 27.1.55 throws XMLException during the resaving of a DOCX document with an external reference XML, aka I640714.",
"severity": [],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-55969"
},
{
"type": "WEB",
"url": "https://ej2.syncfusion.com/aspnetmvc/documentation/release-notes/27.1.55?type=all"
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-12-15T04:15:04Z"
}
}
advisories/unreviewed/2024/12/GHSA-hx59-p22r-49rv/GHSA-hx59-p22r-49rv.json
+45
View File
@@ -0,0 +1,45 @@
{
"schema_version": "1.4.0",
"id": "GHSA-hx59-p22r-49rv",
"modified": "2024-12-15T06:32:50Z",
"published": "2024-12-15T06:32:50Z",
"aliases": [
"CVE-2024-56074"
],
"details": "gitingest before 9996a06 mishandles symbolic links that point outside of the base directory.",
"severity": [],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-56074"
},
{
"type": "WEB",
"url": "https://github.com/cyclotruc/gitingest/pull/23"
},
{
"type": "WEB",
"url": "https://github.com/cyclotruc/gitingest/commit/9996a06a94450497c1abb35997f5e6cbc9b571ff"
},
{
"type": "WEB",
"url": "https://github.com/cyclotruc/gitingest/blob/9996a06a94450497c1abb35997f5e6cbc9b571ff/src/ingest.py#L22-L30"
},
{
"type": "WEB",
"url": "https://github.com/cyclotruc/gitingest/blob/9996a06a94450497c1abb35997f5e6cbc9b571ff/src/ingest.py#L99-L100"
},
{
"type": "WEB",
"url": "https://gitingest.com"
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-12-15T04:15:05Z"
}
}