Connected evidence
Follow a shared identifier, source page or planning group across source records. Dates show chronology; a connection does not establish cause, a shared rollout or applicability to your environment.
Saved searches 0
Keep up to eight named searches. Saved in this browser. Filters are also shareable in the page address.
Threads
Related changes across sources- Cloudflare: SSL Certificate Provisioning Issue Service incident6 linked entries across history · in Other vendors Follow evidence and connection reasons
- AzureCloud.centralus Azure service tag changed5 linked entries across history · in Azure Follow evidence and connection reasons
- AzureCloud.eastus Azure service tag changed5 linked entries across history · in Azure Follow evidence and connection reasons
- AzureCloud.japaneast Azure service tag changed5 linked entries across history · in Azure Follow evidence and connection reasons
- AzureCloud.taiwannorth Azure service tag changed5 linked entries across history · in Azure Follow evidence and connection reasons
- AzureCloud.westus3 Azure service tag changed5 linked entries across history · in Azure Follow evidence and connection reasons
- AzureMonitor Azure service tag changed5 linked entries across history · in Azure Follow evidence and connection reasons
- vm2: nesting: true bypasses require: false, allowing sandbox escape to arbitrary OS command execution Advisory content revised: vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.1, when a NodeVM is created with nesting: true, sandbox code can unconditionally require('vm2') regardless of the outer VM's require configuration — including require: false. With …5 linked entries across history · in Security Follow evidence and connection reasons
- go-git is an extensible git implementation library written in pure Go. Prior to 5.19.2 and 6.0.0-alpha.5, worktree operations (including checkout, status, and add) resolve symbolic links inside the working tree without confining resolution … Advisory content revised5 linked entries across history · in Security Follow evidence and connection reasons
- proxy-addr is a Node.js module that determines a request's client address behind trusted reverse proxies, and it backs Express req.ip and req.ips. In versions 1.1.0 through 2.0.7, a trust subnet written in IPv4-mapped IPv6 notation with an … Advisory content revised5 linked entries across history · in Security Follow evidence and connection reasons
- AzureCloud.australiasoutheast Azure service tag changed4 linked entries across history · in Azure Follow evidence and connection reasons
- AzureCloud.brazilsouth Azure service tag changed4 linked entries across history · in Azure Follow evidence and connection reasons
- AzureCloud.centralfrance Azure service tag changed4 linked entries across history · in Azure Follow evidence and connection reasons
- AzureCloud.malaysiawest Azure service tag changed4 linked entries across history · in Azure Follow evidence and connection reasons
- AzureCloud.southeastus Azure service tag changed4 linked entries across history · in Azure Follow evidence and connection reasons
- AzureCloud.westcentralus Azure service tag changed4 linked entries across history · in Azure Follow evidence and connection reasons
- AzureMonitor.Core Azure service tag changed4 linked entries across history · in Azure Follow evidence and connection reasons
- On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the path ends in /. For example, 'root.Open("symlink/")' will open… Advisory content revised4 linked entries across history · in Security Follow evidence and connection reasons
- MessagePack for C# is a MessagePack serializer for C#. Prior to 2.5.303 and 3.1.9, deserializing attacker-controlled MessagePack data as System.Object through PrimitiveObjectFormatter can cause excessive memory allocation. The formatter all… Advisory content revised4 linked entries across history · in Security Follow evidence and connection reasons
- Microsoft Copilot (Microsoft 365): Copilot in SharePoint Roadmap entry4 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
- PowerBI Azure service tag changed3 linked entries across history · in Azure Follow evidence and connection reasons
- An issue in karmada-io karmada v1.9.0 and before allows a local attacker to execute arbitrary code via a crafted command to get the token component. NOTE: The maintainer states that the behavior is intended design and notes that the researc… Advisory content revised3 linked entries across history · in Security Follow evidence and connection reasons
- @grpc/grpc-js implements the core functionality of gRPC purely in JavaScript, without a C++ addon. Prior to 1.13.6 and 1.14.5, getAuthContext does not distinguish authorized from unauthorized peer certificates when server credentials set re… Advisory content revised3 linked entries across history · in Security Follow evidence and connection reasons
- Handlebars provides the power necessary to let users build semantic templates. From 3.0.0 until 4.7.10, Handlebars lookupProperty returns Function.prototype.constructor before applying the prototype-access deny list because constructor is a… Advisory content revised3 linked entries across history · in Security Follow evidence and connection reasons
- Handlebars provides the power necessary to let users build semantic templates. From 4.0.0 until 4.7.10, Handlebars.compile() and Handlebars.precompile() accept pre-parsed AST objects while validating only selected PathExpression, NumberLite… Advisory content revised3 linked entries across history · in Security Follow evidence and connection reasons
- fflate through 0.8.2 is vulnerable to denial of service via an infinite loop in unzipSync(). A crafted ZIP archive with a central directory entry declaring compressed_size=0xFFFFFFFF (ZIP64 sentinel) but missing the required ZIP64 extra fie… Advisory content revised3 linked entries across history · in Security Follow evidence and connection reasons
- Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.11.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, the Argo CD repo-server is vulnerable to command injection when it clones, tests, or fetches an SSH Git reposi… Advisory content revised3 linked entries across history · in Security Follow evidence and connection reasons
- node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.19, node-tar does not enforce hard upper bounds on total decompressed data, entry counts, or decompression ratio in extraction and parsing paths such as src/extract.ts… Advisory content revised3 linked entries across history · in Security Follow evidence and connection reasons
- node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.18, tar.replace accepts a checksum-valid tar header with a negative base-256 encoded entry size, causing the archive scanner to make no progress while repeatedly parsi… Advisory content revised3 linked entries across history · in Security Follow evidence and connection reasons
- Impact: Advisory content revised3 linked entries across history · in Security Follow evidence and connection reasons