← All credits

Red Hat would like to thank Codean Labs for reporting this issue.

13 vulnerability records and advisories credit this contributor.

Evolution-data-server: evolution data server: arbitrary file deletion via inconsistent uri handling

Glib: integer overflow in glib gio attribute escaping causes heap buffer overflow

Yelp: yelp-xsl: overly permissive content security policy in yelp allows host file disclosure from flatpak applications

Glib: glib: denial of service via integer overflow in g_buffered_input_stream_peek()

Libsoup: libsoup: http header injection via specially crafted urls when an http proxy is configured

Libsoup: libsoup: http header injection or response splitting via crlf injection in content-disposition header

Libsoup: libsoup: credential leakage via http redirects

Libsoup: out-of-bounds read in libsoup handle_partial_get() leading to heap information disclosure

Libsoup: libsoup: header and http request injection via crlf injection

Libsoup: libsoup: http smuggling and server-side request forgery via malformed hostnames