Snyk

security update for plexus-archiver

Broken access control in dashboard snapshots

Red Hat Security Advisory: rh-maven33-plexus-archiver and rh-maven35-plexus-archiver security update

Denial of Service (DoS)

Directory Traversal

Directory Traversal

Versions of the package deno before 1.31.0 are vulnerable to Regular Expression Denial of Service (ReDoS) due to the upgradeWebSocket function, which contains regexes in the form of /s*,s*/, used for splitting the Connection/Upgrade header. A specially cr

All versions of the package lite-web-server are vulnerable to Denial of Service (DoS) when an attacker sends an HTTP request and includes control characters that the decodeURI() function is unable to parse.

Snyk has identified a remote code execution (RCE) vulnerability in all versions of Code Agent. The vulnerability enables an attacker to execute arbitrary code within the Code Agent container. Exploiting this vulnerability would require an attacker to have