Anthony Weems

**Name of the Vulnerable Software and Affected Versions** OSV-SCALIBR (affected versions not specified) **Description** The issue allows for arbitrary file write as the OSV-SCALIBR user on the host system via a path traversal vulnerability when using OSV-SCALIBR's unpack() function for container images. This is particularly problematic when using the CLI flag --remote-image on untrusted container images. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** nodepdf version 1.3.0 **Description** The issue arises from the input passed to the `Pdf()` function being shell escaped and then passed to `child process.exec()` during PDF rendering. However, the shell escape fails to properly encode special characters, such as semicolon and curly braces, which can be exploited to achieve command execution. **Recommendations** For nodepdf version 1.3.0, consider disabling the `Pdf()` function until a patch is available to prevent command execution exploitation. Restrict access to the `child process.exec()` function to minimize the risk of exploitation. Avoid using special characters, such as semicolon and curly braces, in the input passed to the `Pdf()` function until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** ingress-nginx (affected versions not specified) **Description** A security issue was discovered in ingress-nginx where a user that can create or update ingress objects can use `.metadata.annotations` in an Ingress object to obtain the credentials of the ingress-nginx controller. In the default configuration, that credential has access to all secrets in the cluster. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Oracle Java SE versions 7u331, 8u321, 11.0.14, 17.0.2, 18 Oracle GraalVM Enterprise Edition versions 20.3.5, 21.3.1, 22.0.0.2 **Description** The issue is related to insufficient input validation in the JNDI component of the Oracle Java SE and Oracle GraalVM Enterprise Edition. This allows an unauthenticated attacker with network access via multiple protocols to compromise the system, resulting in unauthorized update, insert, or delete access to some accessible data. The vulnerability applies to Java deployments that load and run untrusted code and rely on the Java sandbox for security. It can also be exploited through APIs in the specified component. **Recommendations** For Oracle Java SE versions 7u331, 8u321, 11.0.14, 17.0.2, 18, update to a version that includes the fix for this issue. For Oracle GraalVM Enterprise Edition versions 20.3.5, 21.3.1, 22.0.0.2, update to a version that includes the fix for this issue. As a temporary workaround, consider restricting access to the JNDI component until a patch is available. Avoid using APIs in the specified component that supply data to untrusted sources until the issue is resolved.

Name of the Vulnerable Software and Affected Versions: pritunl-client versions prior to 1.0.1116.6 Description: A flaw was found in the software due to a lack of signature verification, leading to sensitive information leakage. Recommendations: For versions prior to 1.0.1116.6, update to version 1.0.1116.6 or later to resolve the issue.

Name of the Vulnerable Software and Affected Versions: pritunl-client versions prior to 1.0.1116.6 Description: A flaw was found in the software that may allow arbitrary write to a user-specified path, potentially leading to privilege escalation. Recommendations: For versions prior to 1.0.1116.6, update to version 1.0.1116.6 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Jenkins Script Security Plugin versions 1.55 and earlier **Description** The issue is related to a sandbox bypass vulnerability in the Jenkins Script Security Plugin, which is caused by incorrect type conversion. This allows a remote attacker to invoke arbitrary constructors in sandboxed scripts. **Recommendations** For Jenkins Script Security Plugin versions 1.55 and earlier, update to a version later than 1.55 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Jenkins Pipeline: Groovy Plugin versions 2.64 and earlier **Description** The issue is related to a sandbox bypass vulnerability in the Jenkins Pipeline: Groovy Plugin, which is associated with incorrect type conversion. This allows attackers to invoke arbitrary constructors in sandboxed scripts, potentially enabling remote attackers to execute malicious actions. **Recommendations** For Jenkins Pipeline: Groovy Plugin versions 2.64 and earlier, update to a version later than 2.64 to resolve the issue.