guarddog vulnerabilities (PyPI)
6 vulnerabilities.
-
guarddogPyPI GuardDog: Blind GitHub URL rewrite in remote project scanning causes SSRF and `GH_TOKEN` exfiltration 8.2 High -
guarddogPyPI GuardDog: Unsanitized human-readable scan output allows terminal escape injection from malicious package content 5.0 Medium -
guarddogPyPI GuardDog Path Traversal Vulnerability Leads to Arbitrary File Overwrite and RCE 8.7 High -
guarddogPyPI GuardDog Zip Bomb Vulnerability in safe_extract() Allows DoS 7.1 High -
guarddogPyPI GuardDog vulnerable to arbitrary file write when scanning a specially-crafted remote PyPI package 5.8 Medium -
guarddogPyPI Arbitrary file write when scanning a specially-crafted local PyPI package 5.8 Medium