scorecard vulnerabilities

Known vulnerabilities in the scorecard package. This does not include vulnerabilities belonging to this package’s dependencies.

Vulnerability	Vulnerable Version
L CVE-2024-41110	<5.0.0-r0
L GHSA-v23v-6jw2-98fq	<5.0.0-r0
L GHSA-hw49-2p59-3mhj	<4.13.1-r11
L CVE-2024-24791	<4.13.1-r11
M Information Exposure Through Log Files	<4.13.1-r10
L GHSA-v6v8-xj6m-xwqh	<4.13.1-r10
L GHSA-49gw-vxvf-fc2g	<4.13.1-r9
L GHSA-236w-p7wf-5ph8	<4.13.1-r9
M CVE-2024-24789	<4.13.1-r9
C CVE-2024-24790	<4.13.1-r9
L CVE-2024-24787	<4.13.1-r8
L GHSA-2jwv-jmq4-4j3r	<4.13.1-r8
L CVE-2024-24788	<4.13.1-r8
L GHSA-5fq7-4mxc-535h	<4.13.1-r8
L GHSA-4v7x-pqxf-cx7m	<4.13.1-r7
L CVE-2023-45288	<4.13.1-r7
L GHSA-qppj-fm5r-hxr3	<4.13.1-r4
L GHSA-9763-4f94-gfch	<4.13.1-r4
C Directory Traversal	<4.13.1-r4
L GHSA-m3r6-h7wv-7xxv	<4.13.1-r4
L GHSA-wr6v-9f75-vh2g	<4.13.1-r4
M Improper Check for Unusual or Exceptional Conditions	<4.13.1-r4
M Improper Validation of Integrity Check Value	<4.13.1-r4
L GHSA-8r3f-844c-mc37	<4.13.1-r4
L GHSA-4v98-7qmw-rqr8	<4.13.1-r4
L GHSA-9p26-698r-w4hx	<4.13.1-r4
H Origin Validation Error	<4.13.1-r4
L GHSA-jq35-85cj-fj4p	<4.13.1-r4
H CVE-2023-44487	<4.13.1-r4
H Race Condition	<4.13.1-r4
L CVE-2024-24786	<4.13.1-r4
H CVE-2023-49568	<4.13.1-r4
C Incorrect Authorization	<4.13.1-r4
L GHSA-m425-mq94-257g	<4.13.1-r4
L GHSA-449p-3h89-pw88	<4.13.1-r4
L GHSA-mw99-9chc-xw7r	<4.13.1-r4
L GHSA-xw73-rw38-6vjc	<4.13.1-r4
C Directory Traversal	<4.13.1-r4
L GHSA-45x7-px36-x8w8	<4.13.1-r4
L GHSA-32ch-6x54-q4h9	<4.13.1-r2
L CVE-2024-24785	<4.13.1-r2
L CVE-2024-24783	<4.13.1-r2
L GHSA-j6m3-gc37-6r6q	<4.13.1-r2
L CVE-2024-24784	<4.13.1-r2
L CVE-2023-45289	<4.13.1-r2
L GHSA-rr6r-cfgf-gc6h	<4.13.1-r2
L GHSA-3q2c-pvp5-3cqp	<4.13.1-r2
L GHSA-fgq5-q76c-gx78	<4.13.1-r2
L CVE-2023-45290	<4.13.1-r2
L GHSA-5f94-vhjq-rpg8	<4.13.1-r1
H CVE-2023-45285	<4.13.1-r1
M CVE-2023-39326	<4.13.1-r1
L GHSA-9f76-wg39-x86h	<4.13.1-r1

Vulnerability

Vulnerable Version

<5.0.0-r0

<5.0.0-r0

<4.13.1-r11

<4.13.1-r11

Information Exposure Through Log Files

<4.13.1-r10