Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
GitForge.jl lacks validation for user provided fields
Vulnerability Description
GitForge.jl is a unified interface for interacting with Git "forges." Versions prior to 0.4.3 lack input validation for user provided values in certain functions. In the `GitForge.get_repo` function for GitHub, the user can provide any string for the owner and repo fields. These inputs are not validated or safely encoded and are sent directly to the server. This means a user can add path traversal patterns like `../` in the input to access any other endpoints on api.github.com that were not intended. Version 0.4.3 contains a patch for the issue. No known workarounds are available.
CVSS Information
N/A
Vulnerability Type
输入验证不恰当
Vulnerability Title
Julia GitForge 输入验证错误漏洞
Vulnerability Description
Julia GitForge是Julia开源的一个与Git forges交互的界面。 Julia GitForge 0.4.3之前版本存在输入验证错误漏洞，该漏洞源于缺少输入验证，可能导致路径遍历攻击。
CVSS Information
N/A
Vulnerability Type
N/A