Skip to content
OpenAdvisories

Archive

5 November 2019

Vulnerabilities first published on this day (UTC), newest first.

43 results · Clear filters · Feed

  • Medium 6.5

    Nokogiri vulnerable to DoS while parsing XML entities

    Nokogiri gem 1.5.x and 1.6.x has DoS while parsing XML entities by failing to apply limits

  • Medium 6.5

    Nokogiri vulnerable to DoS while parsing XML documents

    Nokogiri gem 1.5.x has Denial of Service via infinite loop when parsing XML documents

  • Medium 5.3

    kube-state-metrics may expose secret content in metrics

    A security issue was discovered in the kube-state-metrics versions v1.7.0 and v1.7.1. An experimental feature was added to the v1.7.0 release that enabled annotations to be exposed as metrics. By default, the kube-state-metrics metrics only expose metadata ab…