melange vulnerabilities

Known vulnerabilities in the melange package. This does not include vulnerabilities belonging to this package’s dependencies.

Vulnerability	Vulnerable Version
L GHSA-v725-9546-7q7m	<0.18.3-r1
L Resource Exhaustion	<0.18.3-r1
L GHSA-r9px-m959-cxf4	<0.18.3-r1
L Arbitrary Argument Injection	<0.18.3-r1
L CVE-2024-45338	<0.18.1-r1
L GHSA-w32m-9786-jp63	<0.18.1-r1
L CVE-2024-34155	<0.11.6-r0
L CVE-2024-34158	<0.11.6-r0
L GHSA-crqm-pwhx-j97f	<0.11.6-r0
L GHSA-j7vj-rw65-4v26	<0.11.6-r0
L CVE-2024-34156	<0.11.6-r0
L GHSA-8xfx-rj4p-23jm	<0.11.6-r0
L CVE-2024-41110	<0.11.2-r2
L GHSA-v23v-6jw2-98fq	<0.11.2-r2
L GHSA-xr7q-jx4m-x55m	<0.10.3-r1
L GHSA-2hmf-46v7-v6fx	<0.8.6-r1
L CVE-2023-49559	<0.8.6-r1
L CVE-2024-36127	<0.8.3-r2
L GHSA-v6mg-7f7p-qmqp	<0.8.3-r2
L GHSA-5fq7-4mxc-535h	<0.6.11-r5
L CVE-2024-24787	<0.6.11-r5
L CVE-2024-24788	<0.6.11-r5
L GHSA-2jwv-jmq4-4j3r	<0.6.11-r5
L CVE-2024-32473	<0.6.11-r3
L GHSA-x84c-p2g9-rqv9	<0.6.11-r3
L CVE-2023-45288	<0.6.11-r3
L GHSA-4v7x-pqxf-cx7m	<0.6.11-r3
L GHSA-95pr-fxf5-86gv	<0.6.11-r1
L GHSA-88jx-383q-w4qc	<0.6.11-r1
M Allocation of Resources Without Limits or Throttling	<0.6.11-r1
H Allocation of Resources Without Limits or Throttling	<0.6.11-r1
L GHSA-mq39-4gv4-mvpx	<0.6.9-r4
L CVE-2024-29018	<0.6.9-r4
L CVE-2024-28180	<0.6.9-r2
L CVE-2024-24786	<0.6.9-r3
L GHSA-8r3f-844c-mc37	<0.6.9-r3
L GHSA-c5q2-7r4c-mv6g	<0.6.9-r2
L GHSA-9763-4f94-gfch	<0.5.6-r0
L GHSA-45x7-px36-x8w8	<0.5.5-r0
M Improper Validation of Integrity Check Value	<0.5.5-r0
L GHSA-7ww5-4wqc-m92c	<0.5.5-r0
L GHSA-6wrf-mxfj-pf5p	<0.3.2-r1
L GHSA-33pg-m6jh-5237	<0.3.2-r1
L GHSA-vfp6-jrw2-99g9	<0.5.3-r0
L GHSA-232p-vwff-86mp	<0.3.2-r1
L GHSA-3f2q-6294-fmq5	<0.5.3-r1
H Inefficient Regular Expression Complexity	<0.5.3-r1
M Loop with Unreachable Exit Condition ('Infinite Loop')	<0.5.3-r0
H Unprotected Alternate Channel	<0.3.2-r1
M Missing Encryption of Sensitive Data	<0.3.2-r1
M Unprotected Alternate Channel	<0.3.2-r1

Vulnerability

Vulnerable Version

GHSA-v725-9546-7q7m

<0.18.3-r1

Resource Exhaustion

<0.18.3-r1

GHSA-r9px-m959-cxf4

<0.18.3-r1

Arbitrary Argument Injection

<0.18.3-r1

CVE-2024-45338

<0.18.1-r1