漏洞公告

Potential Denial-of-Service in bindata

Unvalidated redirects

SessionListener can prevent a session from being invalidated breaking logout

Improper Neutralization of Special Elements in Output in helm.sh/helm/v3

Plugin archive directory traversal in Helm

Duplicate Advisory: Helm passes repository credentials to alternate domain

Helm passes repository credentials to alternate domain

Unchecked hostname resolution could allow access to local network resources by users outside the local network

Asymmetric Resource Consumption (Amplification) in Docker containers created by Wings

Helm uses crypto package vulnerable to panic from malformed X.509 certificate

Possible bypass of token claim validation when OAuth2 Introspection caching is enabled

Access Control Bypass

Inconsistent Interpretation of HTTP Requests in github.com/gin-gonic/gin

Denial of service in GJSON

Incorrect Permission Assignment for Critical Resource in Hashicorp Consul

XML Processing error in github.com/crewjam/saml

Auth bypass in SAML provider

Hugo can execute a binary from the current directory on Windows

Path traversal in github.com/ipfs/go-ipfs

Control character injection in console output in github.com/ipfs/go-ipfs

Websocket requests did not call AuthenticateMethod

Duplicate Advisory: gosaml2 is vulnerable to NULL Pointer Dereference from malformed XML signatures

Authentication Bypass in tyk-identity-broker