Pinned post
Find the GitHub Security Lab now on LinkedIn, Mastodon and Bluesky! 👇
GitHub Security Lab
Verified account GitHub@GHSecurityLab
GitHub Security Lab’s mission is to inspire and enable the community to secure the open source software we all depend on.
15 Following 27K Followers 1.4K Posts
Latest posts 5
GHSL-2024-323: Denial of Service (DoS) in snapcraft securitylab.github.com/advisories/GHS…
securitylab.github.com GHSL-2024-323: Denial of Service (DoS) in snapcraft A snap with a crafted yaml file can cause a Denial of Service (DoS) in snapcraft. GHSL-2024-296: Deserialization of untrusted data in Kykms securitylab.github.com/advisories/GHS…
securitylab.github.com GHSL-2024-296: Deserialization of untrusted data in Kykms Kykms is affected by a Deserialization of Untrusted Data vulnerability due to the usage of the outdated version of alibaba/fastjson library. GHSL-2024-273: ReDoS in remove_html_tags of Gradio securitylab.github.com/advisories/GHS…
securitylab.github.com GHSL-2024-273: ReDoS in remove_html_tags of Gradio remove_html_tags uses a regex that has a ReDoS vulnerability. GHSL-2024-327: Poisoned Pipeline Execution (PPE) in Microsoft FluentUI securitylab.github.com/advisories/GHS…
securitylab.github.com GHSL-2024-327: Poisoned Pipeline Execution (PPE) in Microsoft FluentUI The pr-website-deploy-comment workflow of Microsoft FluentUI is vulnerable to Poisoned Pipeline Execution (PPE).