diff options
| author | Salvatore Bonaccorso <carnil@debian.org> | 2024-04-19 22:42:16 +0200 |
|---|---|---|
| committer | Salvatore Bonaccorso <carnil@debian.org> | 2024-04-19 22:42:16 +0200 |
| commit | 386f713d82a007cac6bd29b085e9919abeda9c8e (patch) | |
| tree | 9065282eee82c451b94c0757a030e87c4861259a | |
| parent | 466a96da80859537421264a92d2a2031a07e3a23 (diff) | |
Add CVE-2024-27306/python-aiohttp
| -rw-r--r-- | data/CVE/list | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/data/CVE/list b/data/CVE/list index 4168c2be84..38e8ee79d0 100644 --- a/data/CVE/list +++ b/data/CVE/list @@ -410,7 +410,10 @@ CVE-2024-28185 (Judge0 is an open-source online code execution system. The appli CVE-2024-28076 (The SolarWinds Platform was susceptible to a Arbitrary Open Redirectio ...) NOT-FOR-US: SolarWinds CVE-2024-27306 (aiohttp is an asynchronous HTTP client/server framework for asyncio an ...) - TODO: check + - python-aiohttp <unfixed> + NOTE: https://github.com/aio-libs/aiohttp/security/advisories/GHSA-7gpw-8wmc-pm8g + NOTE: https://github.com/aio-libs/aiohttp/pull/8319 + NOTE: https://github.com/aio-libs/aiohttp/commit/28335525d1eac015a7e7584137678cbb6ff19397 (v3.9.4) CVE-2024-24910 (A local attacker can escalate privileges on affected Check Point ZoneA ...) NOT-FOR-US: Check Point CVE-2024-23557 (HCL Connections contains a user enumeration vulnerability. Certain act ...) |