hawk2 vulnerabilities (openSUSE)
13 vulnerabilities.
-
hawk2openSUSE Ruby JSON: JSON::ResumableParser#partial_value dereferences a freed input buffer and crashes on truncated duplicate-key streams 8.7 High -
hawk2openSUSE Action Pack: Possible arbitrary file read and remote code execution in Active Storage variant processing 9.5 Critical -
hawk2openSUSE rails-html-sanitizer: Possible XSS vulnerability with certain configurations 5.1 Medium -
hawk2openSUSE Loofah `allowed_uri?` does not detect `javascript:` URIs split by numeric character references without semicolons 2.3 Low -
hawk2openSUSE Loofah: SVG `href` attribute bypasses local-reference restriction 4.7 Medium -
hawk2openSUSE Loofah `allowed_uri?` does not detect `javascript:` URIs split by named whitespace character references 2.3 Low -
hawk2openSUSE Rack is vulnerable to a memory-exhaustion DoS through unbounded URL-encoded body parsing 7.5 High -
hawk2openSUSE Active Record logging vulnerable to ANSI escape injection 2.7 Low -
hawk2openSUSE net-imap vulnerable to STARTTLS stripping via invalid response timing 7.6 High -
hawk2openSUSE Security update for hawk2 No score -
hawk2openSUSE hawk: Insecure file permissions 7.8 High -
hawk2openSUSE An issue was discovered in ClusterLabs Hawk 2.x through 2.3.0-x. There is a Ruby shell code... 9.8 Critical -
hawk2openSUSE ClusterLabs crmsh vulnerable to shell code injection 7.8 High