Skip to content
OpenAdvisories

Archive

19 November 2022

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Medium 5.5
    CVE-2022-4065 Public exploit

    cbeust testng XML File Parser JarFileUtils.java testngXmlExistsInJar path traversal

    A vulnerability was found in cbeust testng 7.5.0/7.6.0/7.6.1/7.7.0. It has been declared as critical. Affected by this vulnerability is the function testngXmlExistsInJar of the file testng-core/src/main/java/org/testng/JarFileUtils.java of the component XML F…

  • Medium 6.1

    Credential exposure when running third-party builders in knative/func

    knative.dev/func is is a client library and CLI enabling the development and deployment of Kubernetes functions. Developers using a malicious or compromised third-party buildpack could expose their registry credentials or local docker socket to a malicious `l…