kazet

Security vulnerability disclosure

6

Hello, CERT PL found a security vulnerability in this repository. How can we report this privately? We don't see any security policy describing how such vulnerabilities should be reported.

Mixed-active-content: fewer FPs

1

### Template / PR Information There are some sites which download scripts using an unencrypted connection (e.g. http://html5shiv.googlecode.com/svn/trunk/html5.js) to the users of old browsers. This rule filters such sites so...

Please bump cryptography requirement upper bound as there are known vulnerabilities in cryptography <42

1

**Describe the bug** Please bump cryptography requirement upper bound as there are known vulnerabilities in cryptography

Discuss whether translations (e.g. for Nuclei messages) could be at least partly automated

2

E.g. a bot can submit PRs for missing translations

Improve artemis/modules/data/nuclei_templates_custom/error-based-sql-injection.yaml

2

Currently, this Nuclei template detects SQL errors. We should ensure that on page without injections no error appears to filter out false positives where an error appears always, so there's...