Minder GetRepositoryByName data leak

概要

参考情報

• stacklok/minder security advisory · WEB
• nvd.nist.gov/vuln/detail/CVE-2024-31455 · ADVISORY
• stacklok/minder#2941 · WEB
• stacklok/minder commit 11b6573 · WEB
• stacklok/minder commit 5c381cf · WEB
• stacklok/minder · PACKAGE

github.com/stacklok/minder のその他の脆弱性

• CVE-2024-37904中 5.7Minder is an open source Software Supply Chain Security Platform. Minder's Git provider is vulnerable to a denial of service from a maliciou…
• CVE-2024-35238中 5.3Minder by Stacklok is an open source software supply chain security platform. Minder prior to version 0.0.51 is vulnerable to a denial-of-se…
• CVE-2024-35194中 5.3Minder is a software supply chain security platform. Prior to version 0.0.50, Minder engine is susceptible to a denial of service from memor…
• CVE-2024-35185中 5.3Minder is a software supply chain security platform. Prior to version 0.0.49, the Minder REST ingester is vulnerable to a denial of service …
• CVE-2024-34084高 7.5Minder's `HandleGithubWebhook` is susceptible to a denial of service attack from an untrusted HTTP request. The vulnerability exists before …