Go to issue

Labels Milestones New Issue

0 Open 46 Closed

Label

Show archived labels Use alt + click/enter to exclude labels

All labels No label

dependencies

docker

javascript

security

severity:critical

severity:high

severity:low

severity:moderate

Milestone

All milestones No milestones

Project

All projects No project

Author

All users

Assignee

Assigned to nobody Assigned to anybody

argoyle (Joakim Olsson) buildtools (Buildtools) kubernetes (Kubernetes) releaser (Unbound Releaser) renovate (Renovate Bot)

Sort

Newest Oldest Most recently updated Least recently updated Most commented Least commented Nearest due date Farthest due date

0 Open 46 Closed

Label

Clear labels

dependencies

docker

javascript

security

severity:critical

severity:high

severity:low

severity:moderate

Milestone

No milestone

Projects

Clear projects

Assignee

Clear assignees

argoyle

buildtools

kubernetes

releaser

renovate

NPM IP package vulnerable to Server-Side Request Forgery (SSRF) attacks securityseverity:high

#46

by argoyle was closed 2024-02-21 04:41:15 +00:00

Vite dev server option server.fs.deny can be bypassed when hosted on case-insensitive filesystem securityseverity:high

#45

by argoyle was closed 2024-02-03 04:48:12 +00:00

Axios Cross-Site Request Forgery Vulnerability securityseverity:moderate

#44

by argoyle was closed 2023-11-16 04:43:01 +00:00

Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning securityseverity:high

#43

by argoyle was closed 2024-02-06 04:41:11 +00:00

Arbitrary File Creation/Overwrite due to insufficient absolute path sanitization securityseverity:high

#42

by argoyle was closed 2024-02-06 04:41:10 +00:00

Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic links securityseverity:high

#41

by argoyle was closed 2024-02-06 04:41:09 +00:00

Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic links securityseverity:high

#40

by argoyle was closed 2024-02-06 04:41:06 +00:00

Arbitrary File Creation/Overwrite on Windows via insufficient relative path sanitization securityseverity:high

#39

by argoyle was closed 2024-02-06 04:41:06 +00:00

Improper Input Validation in tar-fs securityseverity:high

#38

by argoyle was closed 2024-02-06 06:53:26 +00:00

Regular Expression Denial of Service in string package securityseverity:high

#37

by argoyle was closed 2024-02-06 06:53:18 +00:00

Prototype pollution in webpack loader-utils securityseverity:critical

#36

by argoyle was closed 2024-02-06 06:53:09 +00:00

glob-parent before 6.0.1 and 5.1.2 vulnerable to Regular Expression Denial of Service (ReDoS) securityseverity:moderate

#35

by argoyle was closed 2024-02-06 04:40:46 +00:00

glob-parent before 6.0.1 vulnerable to Regular Expression Denial of Service (ReDoS) securityseverity:moderate

#34

by argoyle was closed 2024-02-06 06:53:00 +00:00

glob-parent before 5.1.2 vulnerable to Regular Expression Denial of Service in enclosure regex securityseverity:high

#33

by argoyle was closed 2024-02-06 04:40:45 +00:00

PostCSS line return parsing error securityseverity:moderate

#32

by argoyle was closed 2024-02-06 04:41:03 +00:00

Server-Side Request Forgery in Request securityseverity:moderate

#31

by argoyle was closed 2023-08-08 14:00:05 +00:00

Server-Side Request Forgery in Request securityseverity:moderate

#30

by argoyle was closed 2023-08-02 06:58:18 +00:00

tough-cookie Prototype Pollution vulnerability securityseverity:moderate

#29

by argoyle was closed 2023-07-22 07:57:32 +00:00

semver vulnerable to Regular Expression Denial of Service securityseverity:moderate

#28

by argoyle was closed 2023-07-22 07:57:25 +00:00

Uncaught Exception in yaml securityseverity:moderate

#27

by argoyle was closed 2023-06-02 14:11:19 +00:00