Category: Advisories

This affects the package conf-cfg-ini before 1.2.2. If an attacker submits a malicious INI file to an application that parses it with decode, they will...

This affects all versions of package sonar-wrapper. The injection point is located in lib/sonarRunner.js. Read More

This affects all versions of package npm-help. The injection point is located in line 13 in index.js file in export.latestVersion() function. Read More

All versions of package git-archive are vulnerable to Command Injection via the exports function. Read More

A vulnerability was found in Tecrail Responsive Filemanger up to 9.10.x and classified as critical. The manipulation leads to path traversal. The attack may be...

FortiGuard Labs is aware of a report that H0lyGh0st ransomware was primarily used against "small-to-midsized businesses, including manufacturing organizations, banks, schools, and event and meeting...

FEDORA-2022-d26586b419 Packages in this update: java-11-openjdk-11.0.16.0.8-1.fc35 Update description: New in release OpenJDK 11.0.16 (2022-07-19) The release announcement can be found at https://bit.ly/openjdk11016 Full release details...

FEDORA-2022-ae563934f7 Packages in this update: java-11-openjdk-11.0.16.0.8-1.fc36 Update description: New in release OpenJDK 11.0.16 (2022-07-19) The release announcement can be found at https://bit.ly/openjdk11016 Full release details...

FEDORA-2022-64431bccec Packages in this update: java-17-openjdk-17.0.4.0.8-1.fc35 Update description: New in release OpenJDK 17.0.4 (2022-07-19) The release announcement can be found at https://bit.ly/openjdk1704 Full release details...

FEDORA-2022-b76ab52e73 Packages in this update: java-latest-openjdk-18.0.2.0.9-1.rolling.fc35 Update description: New in release OpenJDK 18.0.2 (2022-07-19) Full release notes can be found at https://builds.shipilev.net/backports-monitor/release-notes-18.0.2.txt Security fixes JDK-8272243:...