Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

A new security advisory on kind-of affects 2 of your repositories #122

Open
PH-Nascimento opened this issue Apr 4, 2020 · 0 comments
Open

A new security advisory on kind-of affects 2 of your repositories #122

PH-Nascimento opened this issue Apr 4, 2020 · 0 comments

Comments

@PH-Nascimento
Copy link
Contributor

@PH-Nascimento PH-Nascimento commented Apr 4, 2020

Alerta da noite de 03/04
Parece se tratar de algum movimento externo a Pragmatismo.
A vulnerabilidade alertada afetaria o OppBot?


permite que a entrada do usuário externo substitua certos atributos internos por um nome conflitante, conforme demonstrado por 'constructor': {'name': 'Symbol'}. Portanto, uma carga útil criada pode substituir esse atributo interno para manipular o resultado da detecção de tipo.

https://github.com/advisories/GHSA-6c8f-qphg-qjgp

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Linked pull requests

Successfully merging a pull request may close this issue.

None yet
1 participant
You can’t perform that action at this time.