Security Advisories · google/security-research · GitHub

Security Advisories

View information about security vulnerabilities from this repository's maintainers.

AWS: In-band protocol negotiation and robustness weaknesses in AWS KMS and Encryption SDKs
GHSA-wqgp-vphw-hphf published Sep 28, 2020 by sirdarckcat

Low
Telestream: SQL injection in Sentry/Medius
GHSA-g69r-8jwh-2462 published Sep 16, 2020 by u269c

High
AWS: In-band key negotiation issue in the AWS S3 Crypto SDK for golang
GHSA-7f33-f4f5-xwgw published Aug 10, 2020 by u269c

Low
AWS: CBC Padding oracle in the AWS S3 Crypto SDK for golang
GHSA-f5pg-7wfw-84q9 published Aug 10, 2020 by u269c

Moderate
AngularJS: XSS in JQLite DOM manipulation functions
GHSA-5cp4-xmrw-59wf published Aug 3, 2020 by sirdarckcat

Moderate
AWS: Unencrypted md5 plaintext hash in metadata in the AWS S3 Crypto SDK for golang
GHSA-76wf-9vgp-pj7w published Aug 10, 2020 by u269c

Moderate
Apple: Cross-process SpectreRSB/ret2spec vulnerability in macOS
GHSA-g79q-75p5-733r published Aug 14, 2020 by u269c

Moderate
Zoom: Multiple OAuth vulnerabilities
GHSA-6r3h-49f8-wwph published Jul 28, 2020 by sirdarckcat

High
Zoom: XSS in Zoom.us Signup Flow
GHSA-fpgp-vrmv-v8f2 published Jul 7, 2020 by sirdarckcat

High
BSD: Out-of-bounds kernel heap access in hib_get_item for FreeBSD and OpenBSD
GHSA-2j5v-f98f-f9gr published Sep 1, 2020 by u269c

Moderate