Security Advisories | GitStock

high2022-06-16

`Read` on uninitialized buffer can cause UB (impl of `ReadKVExt`)

hexilee/bronzedb · GHSA-5phc-849h-vcxg

high2022-06-16

`read` on uninitialized buffer may cause UB (bite::read::BiteReadExpandedExt::read_framed_max)

hinaria/bite · GHSA-72r2-rg28-47v9

high2022-06-16

'Read' on uninitialized memory may cause UB

binast/binjs-ref · GHSA-c6px-4grw-hrjr

high2022-06-16

Arrow2 allows double free in `safe` code

jorgecarleitao/arrow2 · GHSA-5j8w-r7g8-5472

high2022-06-16

`FixedSizeBinaryArray` does not perform bound checks on accessing values and offsets

apache/arrow-rs · GHSA-qgrp-8f3v-q85p

high2022-06-16

`DecimalArray` does not perform bound checks on accessing values and offsets

apache/arrow-rs · GHSA-h588-76vg-prgj

high2022-06-16

Reading on uninitialized memory may cause UB ( `util::read_spv()` )

maikklein/ash · GHSA-qj69-c89v-jwq2

high2022-06-16

`BinaryArray` does not perform bound checks on reading values and offsets

apache/arrow-rs · GHSA-r7cj-wmwv-hfw5

medium2022-06-16

`array!` macro is unsound when its length is impure constant

xfix/array-macro · GHSA-7v4j-8wvr-v55r

medium2022-06-16

`array!` macro is unsound in presence of traits that implement methods it calls internally

xfix/array-macro · GHSA-83gg-pwxf-jr89

medium2022-06-16

Space bug in `clean_text`

rust-ammonia/ammonia · GHSA-p2g9-94wh-65c2

high2022-06-16

`Read` on uninitialized buffer in `fill_buf()` and `read_up_to()`

netvl/acc_reader · GHSA-hv9v-7w3v-rj6f

high2022-06-16

abomonation transmutes &T to and from &[u8] without sufficient constraints

timelydataflow/abomonation · GHSA-hfxp-p695-629x

medium2022-06-16

CVE-2022-29257-AutoUpdater module fails to validate certain nested components of the bundle

electron/electron · GHSA-77xc-hjv8-ww97

low2022-06-16

CVE-2022-29247-Compromised child renderer processes could obtain IPC access without nodeIntegrationInSubFrames being enabled

electron/electron · GHSA-mq8j-3h7h-p8g7

high2022-06-16

CVE-2022-29241-Jupyter server Token bruteforcing

jupyter-server/jupyter_server · GHSA-q874-g24w-4q9g

medium2022-06-16

CVE-2022-29238-Token bruteforcing.

jupyter/notebook · GHSA-v7vq-3x77-87vg

medium2022-06-16

Library exclusively intended to obfuscate code.

mxxo/plutonium · GHSA-gfg9-x6px-r7gr

high2022-06-16

CVE-2022-33140-Code injection in Apache NiFi and NiFi Registry

apache/nifi · GHSA-77hf-23pq-2g7c

high2022-06-16

CVE-2021-33036-User account escalation in Apache Hadoop

apache/hadoop · GHSA-58jx-f5rf-qgqf