| Package | Affected versions | Patched versions |
|---|---|---|
| lava | < 2022.10 | 2022.10 |
In Linaro Automated Validation Architecture (LAVA) before 2022.10, there is dynamic code execution in lava_server/lavatable.py. Due to improper input sanitization, an anonymous user can force the lava-server-gunicorn service to execute user-provided code on the server.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free