OPA Compiler: Bypass of WithUnsafeBuiltins using “with” keyword to mock functions

### Impact The Rego compiler provides a (deprecated) `WithUnsafeBuiltins` function, which allows users to provide a set of built-in functions that should be deemed unsafe — and as such rejected — by ...

Continue Reading

CVSS3 - CRITICAL

JOSE vulnerable to resource exhaustion via specifically crafted JWE

The PBKDF2-based JWE key management algorithms expect a JOSE Header Parameter named `p2c` ([PBES2 Count](https://www.rfc-editor.org/rfc/rfc7518.html#section-4.8.1.2)), which determines how many PBKDF2 ...

Continue Reading

CVSS3 - MEDIUM

Harbor fails to validate the user permissions when updating tag retention policies

### Impact Harbor fails to validate the user permissions when updating tag retention policies. API call: PUT /retentions/{id} By sending a request to update a tag retention policy with an id that b ...

Continue Reading
Harbor fails to validate the user permissions when updating tag retention policies

### Impact Harbor fails to validate the user permissions when updating tag retention policies. API call: PUT /retentions/{id} By sending a request to update a tag retention policy with an id that b ...

Continue Reading
Harbor fails to validate the user permissions when viewing Webhook policies

### Impact Harbor fails to validate the user permissions to view Webhook policies including relevant credentials configured in different projects the user doesn’t have access to, resulting in malicio ...

Continue Reading
Harbor fails to validate the user permissions when viewing Webhook policies

### Impact Harbor fails to validate the user permissions to view Webhook policies including relevant credentials configured in different projects the user doesn’t have access to, resulting in malicio ...

Continue Reading
Harbor fails to validate the user permissions when updating tag immutability policies

### Impact Harbor fails to validate the user permissions when updating tag immutability policies - API call: PUT /projects/{project_name_or_id}/immutabletagrules/{immutable_rule_id} By sending a req ...

Continue Reading
Harbor fails to validate the user permissions when updating tag immutability policies

### Impact Harbor fails to validate the user permissions when updating tag immutability policies - API call: PUT /projects/{project_name_or_id}/immutabletagrules/{immutable_rule_id} By sending a req ...

Continue Reading

Back to Main

Subscribe for the latest news: