Skip to content
OpenAdvisories

Package · Debian

lava

6 known vulnerabilities.

6 results · Feed

  • Critical 9.8

    In Linaro Automated Validation Architecture (LAVA) before 2022.11.1, remote code execution can be achieved through user…

  • Medium 6.5

    In Linaro Automated Validation Architecture (LAVA) before 2022.11, users with valid credentials can submit crafted XMLR…

  • High 8.8

    In Linaro Automated Validation Architecture (LAVA) before 2022.10, there is dynamic code execution in lava_server/lavat…

  • Unscored —

    An issue was discovered in Linaro LAVA before 2018.5.post1. Because of use of yaml.load() instead of yaml.safe_load() w…

  • Unscored —

    An issue was discovered in Linaro LAVA before 2018.5.post1. Because of support for URLs in the submit page, a user can …

  • Unscored —

    An issue was discovered in Linaro LAVA before 2018.5.post1. Because of support for file: URLs, a user can force lava-se…