Minder GetRepositoryByName data leak

Mô tả

Tham khảo

• stacklok/minder security advisory · WEB
• nvd.nist.gov/vuln/detail/CVE-2024-31455 · ADVISORY
• stacklok/minder#2941 · WEB
• stacklok/minder commit 11b6573 · WEB
• stacklok/minder commit 5c381cf · WEB
• stacklok/minder · PACKAGE

Lỗ hổng khác của github.com/stacklok/minder

• CVE-2024-37904TRUNG BÌNH 5.7Minder is an open source Software Supply Chain Security Platform. Minder's Git provider is vulnerable to a denial of service from a maliciou…
• CVE-2024-35238TRUNG BÌNH 5.3Minder by Stacklok is an open source software supply chain security platform. Minder prior to version 0.0.51 is vulnerable to a denial-of-se…
• CVE-2024-35194TRUNG BÌNH 5.3Minder is a software supply chain security platform. Prior to version 0.0.50, Minder engine is susceptible to a denial of service from memor…
• CVE-2024-35185TRUNG BÌNH 5.3Minder is a software supply chain security platform. Prior to version 0.0.49, the Minder REST ingester is vulnerable to a denial of service …
• CVE-2024-34084CAO 7.5Minder's `HandleGithubWebhook` is susceptible to a denial of service attack from an untrusted HTTP request. The vulnerability exists before …