home.social

#ghsa — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #ghsa, aggregated by home.social.

fetched live
  1. 洪 民憙 (Hong Minhee) @[email protected] ·

    Requested a #CVE ID via a #GitHub Security Advisory on June 27, still nothing almost two weeks later. Docs say up to three days normally. Anyone else seeing longer waits from the GitHub CNA lately, or is this just me?

    #FOSS #InfoSec #GHSA

    #cve #github #foss #infosec #ghsa
  2. 洪 民憙 (Hong Minhee) :nonbinary: @[email protected] ·

    Requested a #CVE ID through a #GitHub Security Advisory on June 27 and still nothing, almost two weeks now. GitHub's docs say it usually takes up to three days.

    Anyone else seeing longer waits from the GitHub CNA lately, or is this just me? Curious whether it's a general slowdown or something specific to my request.

    #FOSS #InfoSec #GHSA

    #cve #foss #ghsa #github #infosec
  3. Cedric @[email protected] ·

    🚀 49,000 Patches !

    We’ve updated our dataset (huggingface.co/datasets/CIRCL/) of real-world vulnerabilities, now enriched with #CWE identifiers and #patches collected from platforms like GitHub, GitLab, Bitbucket.

    This dataset is designed to support the development of tools for vulnerability classification. Dataset features are:

    - #CVE / #GHSA ID
    - Title of the #vulnerability
    - Vulnerability description
    - Patches (URL, Commit message, and Base64-encoded unified diff)
    - CWE categorization

    #cwe #patches #cve #ghsa #vulnerability
  4. defnull @[email protected] ·

    I'm finally allowed to speak about this nice little DoS vulnerability I found in #starlette (and #FastAPI).

    #CVE cve.org/CVERecord?id=CVE-2024-
    #GHSA github.com/encode/starlette/se

    #infosec #Python

    #starlette #fastapi #cve #ghsa #infosec #python
  5. :mima_rule: Mima-sama @[email protected] ·

    Hey #Mastodon admins, just a reminder that the details of the critical #security vulnerability GHSA-3fjr-858r-92rw/CVE-2024-23832 is going to be released tomorrow. ​:MokouWha:​ I still see some instances out there running a vulnerable version... ​:koishtare:​ Sent a DM to the admins of those instances of course. ​:cirno_fumo_yes:​ Please upgrade to a patched version (like 4.2.5 and 4.1.13) as soon as possible. ​:RumiaPray:​

    #MastoAdmin #FediAdmin #CVE-2024-23832 #CVE202423832 #CVE_2024_23832 #CVE #GHSA-3fjr-858r-92rw #GHSA3fjr858r92rw #GHSA_3fjr_858r_92rw #GHSA #GitHub #GitHubsecurityadvisory #cybersecurity #OriginValidation

    #mastodon #security #mastoadmin #fediadmin #cve202423832 #cve_2024_23832
  6. Harry Sintonen @[email protected] ·

    Many important issues raised in daniel.haxx.se/blog/2023/03/02 post by @bagder - not only does #NuGet appear to host dozens of really seriously outdated and #vulnerable packages, it also highlights serious issues in automated vulnerability management via vulnerability databases such as #GitHub Security Advisory Database (#GHSA DB). There definitely is room for improvement here.

    #nuget #vulnerable #github #ghsa