Skip to content
OpenAdvisories

Archive

10 September 2020

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Low 3.8

    Insecure temp file usage in Ubuntu UI toolkit

    On desktop, Ubuntu UI Toolkit's StateSaver would serialise data on tmp/ files which an attacker could use to expose potentially sensitive data. StateSaver would also open files without the O_EXCL flag. An attacker could exploit this to launch a symlink attack…

  • Low 2.6

    File size limit bypass in node-fetch

    node-fetch before versions 2.6.1 and 3.0.0-beta.9 did not honor the size option after following a redirect, which means that when a content size was over the limit, a FetchError would never get thrown and the process would end without failure. For most people…