CallmeMari comments

Results 5 comments of


                                            CallmeMari

[GHSA-8h5w-f6q9-wg35]: remove vulnerability since it is rejected

Hi @dippie8 do you have any references to support this change?

[GHSA-g5h3-w546-pj7f] Spring Boot Security Bypass with Wildcard Pattern Matching on Cloud Foundry

Hi @namandf, just to confirm, this advisory already has published a vulnerable version range of `>= 3.0.0, < 3.0.6` with version 3.0.6 being the first patched version as well as...

[GHSA-r4ph-mx67-x58p] Shopware database password is leaked to an unauthenticated users

Hi @mitelg, we appreciate this information. Just to confirm, what should the package name be updated to?

[GHSA-rrjw-j4m2-mf34] gix-transport code execution vulnerability

Hi @EliahKagan and @Byron I appreciate the collaboration. I see that @EliahKagan has been given reporter credit via the repo GHSA, in order to also give @vin01 the report credit,...

[GHSA-83pv-qr33-2vcf] Litestar and Starlite vulnerable to Path Traversal

Hi @JacobCoffee do you have any references for the addition of the starlite package?