jitsucom-jitsu-console

124 results · Feed

• Medium 4.0
  CVE-2024-39338

  Server-Side Request Forgery in axios

  axios 1.7.2 allows SSRF via unexpected behavior where requests for path relative URLs get processed as protocol relative URLs.

  kubeflow-pipelines-apiserver lerna kubeflow-centraldashboard jitsucom-jitsu-console Debian Ubuntu Wolfi npm
  Aug 9, 2024
• Medium 5.3
  CVE-2024-37168

  @grpc/grpc-js can allocate memory for incoming messages well above configured limits

  @grpc/grps-js implements the core functionality of gRPC purely in JavaScript, without a C++ addon. Prior to versions 1.10.9, 1.9.15, and 1.8.22, there are two separate code paths in which memory can be allocated per message in excess of the `grpc.max_receive_…

  grpc grpc-node kubeflow-centraldashboard jitsucom-jitsu-console Wolfi npm
  Jun 10, 2024
• High 7.5
  CVE-2024-34351 Public exploit Scanner template

  Next.js Server-Side Request Forgery in Server Actions

  Next.js is a React framework that can provide building blocks to create web applications. A Server-Side Request Forgery (SSRF) vulnerability was identified in Next.js Server Actions. If the `Host` header is modified, and the below conditions are also met, an …

  vercel next.js jitsucom-jitsu-console next Wolfi npm
  May 9, 2024
• High 7.5
  CVE-2022-37620

  kangax html-minifier REDoS vulnerability

  A Regular Expression Denial of Service (ReDoS) flaw was found in kangax html-minifier 4.0.0 because of the reCustomIgnore regular expression.

  jitsucom-jitsu-console jitsucom-jitsu-rotor jitsucom-jitsu html-minifier Wolfi npm
  Oct 31, 2022