We’ve disclosed 3357 vulnerabilities
by Snyk Security
Researchers
Snyk Vulnerability Database
The leading database for open source vulnerabilities and cloud misconfigurations.
Binding to an Unrestricted IP Address
Affecting OpenPrinting/cups-browsed package, versions
[0,]
How to fix?
There is no fixed version for OpenPrinting/cups-browsed.
Vulnerabilities from the last week
Directory Traversal
Affects
@saltcorn/server is a Server app for Saltcorn, open-source no-code platform
Affected versions of this package are vulnerable to Directory Traversal due to missing sanitization of the filename parameter used to identify the zip file when passed to the res.download API. This allows an attacker with admin permission to read and download arbitrary zip files when downloading auto backups.
Improper Validation of Integrity Check Value
ironic is an OpenStack Bare Metal Provisioning
Affected versions of this package are vulnerable to Improper Validation of Integrity Check Value due missing validations of checksum files of supplied image_source URLs, before the raw format conversion.
Uncontrolled Resource Consumption
Affected versions of this package are vulnerable to Uncontrolled Resource Consumption due to the mishandling of unbalanced comment strings in JSONTokener.java. An attacker can execute arbitrary code or cause a denial of service by injecting malformed input that exploits this flaw.
Recent vulnerabilities disclosed by Snyk
- M
Arbitrary Argument Injection in ggit (npm)
- M
Command Injection in ggit (npm)
- C
Malicious Package in braintree_express_example (npm)
- C
Malicious Package in braintree.github.io (npm)
- C
Malicious Package in annotation-app (npm)
About Snyk
Snyk is a developer security platform. Integrating directly into development tools, workflows, and automation pipelines, Snyk makes it easy for teams to find, prioritize, and fix security vulnerabilities in code, dependencies, containers, and infrastructure as code. Supported by industry-leading application and security intelligence, Snyk puts security expertise in any developer's toolkit.
