Vulnerabilities

In Linaro Automated Validation Architecture (LAVA) before 2022.11.1, remote code execution can be achieved through user-submitted Jinja2 template.

In Linaro Automated Validation Architecture (LAVA) before 2022.11, users with valid credentials can submit crafted XMLRPC requests that cause a recursive XML entity expansion, leading to excessive use of memory on the se…

In Linaro Automated Validation Architecture (LAVA) before 2022.10, there is dynamic code execution in lava_server/lavatable.py.

An issue was discovered in Linaro LAVA before 2018.5.post1.

An issue was discovered in Linaro LAVA before 2018.5.post1.

An issue was discovered in Linaro LAVA before 2018.5.post1.