Go to issue

Labels Milestones New Issue

0 Open 46 Closed

Label

Show archived labels Use alt + click/enter to exclude labels

All labels No label

dependencies

docker

javascript

security

severity:critical

severity:high

severity:low

severity:moderate

Milestone

All milestones No milestones

Project

All projects No project

Author

All users

Assignee

Assigned to nobody Assigned to anybody

argoyle (Joakim Olsson) buildtools (Buildtools) kubernetes (Kubernetes) releaser (Unbound Releaser) renovate (Renovate Bot)

Sort

Newest Oldest Most recently updated Least recently updated Most commented Least commented Nearest due date Farthest due date

0 Open 46 Closed

Label

Clear labels

dependencies

docker

javascript

security

severity:critical

severity:high

severity:low

severity:moderate

Milestone

No milestone

Projects

Clear projects

Assignee

Clear assignees

argoyle

buildtools

kubernetes

releaser

renovate

Server-Side Request Forgery in Request securityseverity:moderate

#26

by argoyle was closed 2023-06-02 14:11:13 +00:00

@sideway/formula contains Regular Expression Denial of Service (ReDoS) Vulnerability securityseverity:moderate

#25

by argoyle was closed 2023-06-02 14:11:04 +00:00

debug Inefficient Regular Expression Complexity vulnerability securityseverity:low

#24

by argoyle was closed 2023-06-02 14:10:55 +00:00

Prototype Pollution in JSON5 via Parse Method securityseverity:high

#23

by argoyle was closed 2023-06-02 14:10:48 +00:00

Prototype Pollution in JSON5 via Parse Method securityseverity:high

#22

by argoyle was closed 2023-06-02 14:10:26 +00:00

jsonwebtoken has insecure input validation in jwt.verify function securityseverity:high

#21

by argoyle was closed 2023-06-02 14:10:40 +00:00

jsonwebtoken unrestricted key type could lead to legacy keys usage securityseverity:moderate

#20

by argoyle was closed 2023-06-02 14:10:33 +00:00

jsonwebtoken vulnerable to signature validation bypass due to insecure default algorithm in jwt.verify() securityseverity:moderate

#19

by argoyle was closed 2023-06-02 14:10:18 +00:00

jsonwebtoken's insecure implementation of key retrieval function could lead to Forgeable Public/Private Tokens from RSA to HMAC securityseverity:moderate

#18

by argoyle was closed 2023-06-02 14:10:09 +00:00

decode-uri-component vulnerable to Denial of Service (DoS) securityseverity:low

#17

by argoyle was closed 2022-12-05 12:58:24 +00:00

loader-utils is vulnerable to Regular Expression Denial of Service (ReDoS) securityseverity:high

#16

by argoyle was closed 2022-12-05 13:03:29 +00:00

loader-utils is vulnerable to Regular Expression Denial of Service (ReDoS) via url variable securityseverity:high

#15

by argoyle was closed 2022-12-05 13:03:24 +00:00

Prototype pollution in webpack loader-utils securityseverity:critical

#14

by argoyle was closed 2022-12-05 13:03:15 +00:00

Prototype pollution in webpack loader-utils securityseverity:critical

#13

by argoyle was closed 2022-12-05 13:03:07 +00:00

glob-parent before 6.0.1 and 5.1.2 vulnerable to Regular Expression Denial of Service (ReDoS) securityseverity:moderate

#12

by argoyle was closed 2022-12-05 13:03:02 +00:00

glob-parent before 6.0.1 vulnerable to Regular Expression Denial of Service (ReDoS) securityseverity:moderate

#11

by argoyle was closed 2022-12-05 13:02:58 +00:00

Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning security

#10

by argoyle was closed 2022-12-05 13:02:12 +00:00

Arbitrary File Creation/Overwrite due to insufficient absolute path sanitization security

#9

by argoyle was closed 2022-12-05 13:02:07 +00:00

Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic links security

#8

by argoyle was closed 2022-12-05 13:02:01 +00:00

Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic links security

#7

by argoyle was closed 2022-12-05 13:01:56 +00:00