Security
Headlines
HeadlinesLatestCVEs

Headline

GHSA-chj7-w3f6-cvfj: Code Injection in paddlepaddle

The vulnerability arises from the way the url parameter is incorporated into the command string without proper validation or sanitization. If the url is constructed from untrusted sources, an attacker could potentially inject malicious commands.

ghsa
#vulnerability#git

Code Injection in paddlepaddle

Critical severity GitHub Reviewed Published Jan 20, 2024 to the GitHub Advisory Database • Updated Jan 23, 2024

ghsa: Latest News

GHSA-7p9f-6x8j-gxxp: CRI-O: Maliciously structured checkpoint file can gain arbitrary node access