All versions of ftp-srv are vulnerable to Server-Side Request Forgery (SSRF). The package fails to prevent remote clients to access other resources in the network, for example when connecting to the server through telnet. This allows attackers to acces…

All versions of localeval are vulnerable to Sandbox Escape leading to Remote Code Execution. The package fails to restrict access to the main context through constructor.constructor. This may allow attackers to execute arbitrary code in the system. Ev…

All versions of html-pdf-chrome are vulnerable to Server-Side Request Forgery (SSRF). The package executes HTTP requests if the parsed HTML contains external references to resources, such as <iframe src=”http://localhost” height=”800px” width=”800px…

All versions of markdown are vulnerable to Regular Expression Denial of Service (ReDoS). The markdown.toHTML() function has significantly degraded performance when parsing long strings containing underscores. This may lead to Denial of Service if the p…

Net Applicationsから2020年8月のタブレットにおけるWebブラウザのシェアが発表さ…

Net Applicationsから2020年8月のモバイルブラウザのシェアが発表された。2020年…

Description
The CachingHttpClient class from the HttpClient Symfony component relies on the HttpCache class to handle requests. HttpCache uses internal headers like X-Body-Eval and X-Body-File to control the restoration of cached responses. The class w…

Net Applicationsから2020年8月のデスクトップブラウザのシェアが発表された。202…

原田知世が、ニュー・アルバム『恋愛小説3～You & Me』を10月14日にリリースすることが決定し…

Impact
Metadadata signature verification, as used in tuf.client.updater, counted each of multiple signatures with identical authorized keyids separately towards the threshold. Therefore, an attacker with access to a valid signing key could create mult…