Skip to content
OpenAdvisories

Package · Azure Linux

reaper

39 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.5
    CVE-2024-12905 Public exploit

    tar-fs Vulnerable to Link Following and Path Traversal via Extracting a Crafted tar File

    An Improper Link Resolution Before File Access ("Link Following") and Improper Limitation of a Pathname to a Restricted Directory ("Path Traversal"). This vulnerability occurs when extracting a maliciously crafted tar file, which can result in unauthorized fi…

    sqlpad code-server tileserver-gl reaper Debian Ubuntu Azure Linux Wolfi npm
  • High 7.5
    CVE-2024-45590 Public exploit

    body-parser vulnerable to denial of service when url encoding is enabled

    body-parser is Node.js body parsing middleware. body-parser <1.20.3 is vulnerable to denial of service when url encoding is enabled. A malicious actor using a specially crafted payload could flood the server with a large number of requests, resulting in denia…

    expressjs body-parser kubeflow-pipelines-apiserver kubeflow-centraldashboard Debian Ubuntu Azure Linux Wolfi npm
  • High 7.3
    CVE-2020-28458 Public exploit

    Prototype Pollution

    All versions of package datatables.net are vulnerable to Prototype Pollution due to an incomplete fix for https://snyk.io/vuln/SNYK-JS-DATATABLESNET-598806.

    reaper datatables.net Azure Linux npm