Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2020-17353
9.8
CRITICALCVSS v3
Published
August 5, 2020
CVSS v2
7.5 HIGH
Affected
8 projects
Assigned by
MITRE
Severity scale
010
Description
scm/define-stencil-commands.scm in LilyPond through 2.20.0, and 2.21.x through 2.21.4, when -dsafe is used, lacks restrictions on embedded-ps and embedded-svg, as demonstrated by including dangerous PostScript code.
lilypond/lilypondGitLabmain development repository for GNU LilyPond
GitLabmain development repository for GNU LilyPond>= 2.21.0, <= 2.21.4, <= 2.20.0NVD
lilypond/lilypond
GitHubThis is just a mirror of GNU LilyPond repository. If you'd like to contribute to LilyPond, please look at http://www.lilypond.org/development.html
GitHubThis is just a mirror of GNU LilyPond repository. If you'd like to contribute to LilyPond, please look at http://www.lilypond.org/development.html>= 2.21.0, <= 2.21.4, <= 2.20.0NVD
Docker Hub
Crates.io
NPM
RubyGems