Skip to content
OpenAdvisories

Archive

12 September 2021

Vulnerabilities first published on this day (UTC), newest first.

2 results · Feed

  • High 7.6

    Open Redirect

    This affects the package clearance before 2.5.0. The vulnerability can be possible when users are able to set the value of session[:return_to]. If the value used for return_to contains multiple leading slashes (/////example.com) the user ends up being redirec…

  • High 7.3

    Prototype Pollution

    This affects the package set-value before <2.0.1, >=3.0.0 <4.0.1. A type confusion vulnerability can lead to a bypass of CVE-2019-10747 when the user-provided keys used in the path parameter are arrays.