Vulnerability Database
296,720
Total vulnerabilities in the database
CVE-2024-1485
A flaw was found in the decompression function of registry-support. This issue can be triggered if an unauthenticated remote attacker tricks a user into parsing a devfile which uses the parent or plugin keywords. This could download a malicious archive and cause the cleanup process to overwrite or delete files outside of the archive, which should not be allowed.
| Software | From | Fixed in |
|---|---|---|
github.com/devfile/registry-support/registry-library
|
- | 0.0.0-20240206 |
| redhat / openshift | 4.0 | 4.0.x |
| devfile / registry-support | - | 0.0.0-20240206 |
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime