Archive
25 July 2024
Vulnerabilities first published on this day (UTC), newest first.
2 results · Clear filters · Feed
-
Low —
The kstring integration in gix-attributes is unsound
`gix-attributes` (in [`state::ValueRef`](https://github.com/Byron/gitoxide/blob/gix-attributes-v0.22.2/gix-attributes/src/state.rs#L19-L27)) unsafely creates a `&str` from a `&[u8]` containing non-UTF8 data, with the justification that so long as nothing read…
-
Low 2.2
In affected versions of Octopus Server under certain conditions, a user with specific role assignments can access restr…