Skip to content
OpenAdvisories

Archive

1 February 2024

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Low 3.6

    Command Injection in Helix Sync

    In Helix Sync versions prior to 2024.1, a local command injection was identified. Reported by Bryan Riggins.  

  • Low 3.7

    Bref Body Parsing Inconsistency in Event-Driven Functions

    Bref enable serverless PHP on AWS Lambda. When Bref is used with the Event-Driven Function runtime and the handler is a `RequestHandlerInterface`, then the Lambda event is converted to a PSR7 object. During the conversion process, if the request is a MultiPar…