Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: JuliaWeb Clear all filters
TI-2025-32664 CVE-2025-52569

GitHub.jl lacks validation for user-provided fields

Priority LOW 36

GitForge.jl is a unified interface for interacting with Git "forges." Versions prior to 5.9.1 lack input validation of input validation for user-provided values in certain functions.

CVSS 4.0MEDIUM 6.6 Network No auth No interaction EPSS 0.00472 Published 2025-06-25 Fixed in 5.9.1 CWE-20
TI-2025-32606 CVE-2025-52479

HTTP.jl vulnerable to CR/LF Injection in URIs

Priority HIGH 67

HTTP.jl provides HTTP client and server functionality for Julia, and URIs.jl parses and works with Uniform Resource Identifiers (URIs).

CVSS 4.0HIGH 7.7 Network No auth No interaction EPSS 0.00431 Published 2025-06-25 Fixed in 1.10.17 CWE-113
TI-2025-32061 CVE-2025-50178

GitForge.jl lacks validation for user provided fields

Priority LOW 36

GitForge.jl is a unified interface for interacting with Git "forges." Versions prior to 0.4.3 lack input validation for user provided values in certain functions.

CVSS 4.0MEDIUM 6.6 Network No auth No interaction EPSS 0.00472 Published 2025-06-25 Fixed in 0.4.3 CWE-20