Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2020-14929
7.5
HIGHCVSS v3
Published
June 19, 2020
CVSS v2
5 MEDIUM
Affected
9 projects
Assigned by
MITRE
Severity scale
010
Description
Alpine before 2.23 silently proceeds to use an insecure connection after a /tls is sent in certain circumstances involving PREAUTH, which is a less secure behavior than the alternative of closing the connection and letting the user decide what they would like to do.
alpinejs/alpine
GitHubA rugged, minimal framework for composing JavaScript behavior in your markup.
GitHubA rugged, minimal framework for composing JavaScript behavior in your markup. < 2.23NVD
stevespringett/AlpineGitHubAn opinionated scaffolding framework that jumpstarts Java projects with an API-first design, secure defaults, and minimal dependencies
GitHubAn opinionated scaffolding framework that jumpstarts Java projects with an API-first design, secure defaults, and minimal dependencies< 2.23NVD
NPM
Crates.io
Docker Hub
RubyGems