Following the coordinated and responsible vulnerability disclosure guidelines of the **[ISO 29147]()** standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. not ...
Continue Reading
August 02, 2022
This affects all versions of package npos-tesseract. The injection point is located in line 55 in lib/ocr.js.Read More ...
Continue Reading
August 02, 2022
This affects all versions of package heroku-env. The injection point is located in lib/get.js which is required by index.js.Read More ...
Continue Reading
August 02, 2022
This affects all versions of package gitblame. The injection point is located in line 15 in lib/gitblame.js.Read More ...
Continue Reading
August 02, 2022
This affects all versions of package node-latex-pdf.Read More ...
Continue Reading
August 02, 2022
This affects all versions of package curljs.Read More ...
Continue Reading
August 02, 2022
This affects all versions of package s3-kilatstorage.Read More ...
Continue Reading
August 02, 2022
This affects all versions of package Flask-Security. When using the get_post_logout_redirect and get_post_login_redirect functions, it is possible to bypass URL validation and redirect a user to an ar ...
Continue Reading
August 02, 2022
Back to Main
