Grafana is an open-source platform for monitoring and observability. Starting with the 9.1 branch, Grafana introduced the ability to search for a JWT in the URL query parameter auth_token and use it ...
Continue ReadingMay 01, 2023
ESPv2 is a service proxy that provides API management capabilities using Google Service Infrastructure. ESPv2 2.20.0 through 2.42.0 contains an authentication bypass vulnerability. API clients can cra ...
Continue ReadingMay 01, 2023
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 5e257b0d-e466-11ed-834b-6c3be5272acd advisory. - Gr ...
Continue ReadingMay 01, 2023
github.com/GoogleCloudPlatform/esp-v2 is vulnerable to Authentication Bypass. The vulnerability exists because the library does not properly filter the malicious HTTP headers, which allows an attacker ...
Continue ReadingMay 01, 2023
Although the annotator tool's source code is not directly provided in the repository a docker image is provided. From there it is easy to get access to the source code by either extracting the docker ...
Continue ReadingMarch 30, 2023
The version of python-jwt installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-39227 advisory. - pytho ...
Continue ReadingMarch 29, 2023
[![ChatGPT](data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAQAAAC1HAwCAAAAC0lEQVR42mP8Xw8AAoMBgDTD2qgAAAAASUVORK5CYII=)]() OpenAI on Friday disclosed that a bug in the Redis open source librar ...
Continue ReadingMarch 25, 2023
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-076 advisory. - PyJWT is a Python implementation of RFC 7519. PyJWT supports multiple different JWT signing algorithm ...
Continue ReadingMarch 22, 2023
Back to Main