Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
GitHub.jl lacks validation for user-provided fields
Vulnerability Description
GitForge.jl is a unified interface for interacting with Git "forges." Versions prior to 5.9.1 lack input validation of input validation for user-provided values in certain functions. In the `GitHub.repo()` function, the user can provide any string for the `repo_name` field. These inputs are not validated or safely encoded and are sent directly to the server. This means a user can add path traversal patterns like `../` in the input to access any other endpoints on `api.github.com` that were not intended. Users should upgrade immediately to v5.9.1 or later to receive a patch. All prior versions are vulnerable. No known workarounds are available.
CVSS Information
N/A
Vulnerability Type
输入验证不恰当
Vulnerability Title
Julia GitForge 输入验证错误漏洞
Vulnerability Description
Julia GitForge是Julia开源的一个与Git forges交互的界面。 Julia GitForge 5.9.1之前版本存在输入验证错误漏洞，该漏洞源于缺少输入验证，可能导致路径遍历攻击。
CVSS Information
N/A
Vulnerability Type
N/A