20 lines
625 B
Plaintext
20 lines
625 B
Plaintext
Name: google-protobuf
|
|
Version: 4.27.3
|
|
CVE: CVE-2024-7254
|
|
GHSA: GHSA-735f-pc8j-v9w8
|
|
Criticality: High
|
|
URL: https://github.com/protocolbuffers/protobuf/security/advisories/GHSA-735f-pc8j-v9w8
|
|
Title: protobuf-java has potential Denial of Service issue
|
|
Solution: upgrade to '~> 3.25.5', '~> 4.27.5', '>= 4.28.2'
|
|
|
|
Name: puma
|
|
Version: 6.4.2
|
|
CVE: CVE-2024-45614
|
|
GHSA: GHSA-9hf4-67fc-4vf4
|
|
Criticality: Medium
|
|
URL: https://github.com/puma/puma/security/advisories/GHSA-9hf4-67fc-4vf4
|
|
Title: Puma's header normalization allows for client to clobber proxy set headers
|
|
Solution: upgrade to '~> 5.6.9', '>= 6.4.3'
|
|
|
|
Vulnerabilities found!
|