Safety CI > MobSF/Mobile-Security-Framework-MobSF

pipfile_migrate

2 years ago

e287dcfb

windows run fix

No dependencies with known security vulnerabilities.

pipfile_migrate

2 years ago

3025237e

Update mobsf-test.yml

No dependencies with known security vulnerabilities.

pipfile_migrate

2 years ago

4d77a94f

update pipfile and lock

No dependencies with known security vulnerabilities.

pipfile_migrate

2 years ago

44352ad1

Merge branch 'pipfile_migrate' of github.com:MobSF/Mobile-Security-Framework-MobSF into pipfile_migr

No dependencies with known security vulnerabilities.

pipfile_migrate

2 years ago

3c91c324

Update mobsf-test.yml

No dependencies with known security vulnerabilities.

pipfile_migrate

2 years ago

bfd86458

Update mobsf-test.yml

No dependencies with known security vulnerabilities.

pipfile_migrate

2 years ago

11f75abf

Setup updatge

No dependencies with known security vulnerabilities.

pipfile_migrate

2 years ago

2bc8305a

pipfile

No dependencies with known security vulnerabilities.

dependabot/pip/cryptography-41.0.3

2 years ago

16fa8ae3

Build(deps): Bump cryptography from 3.3.2 to 41.0.3 Bumps [cryptography](https://github.com/pyca/cr

No dependencies with known security vulnerabilities.

master

2 years ago

f965183a

[HOTFIX][EFR10] Independent Static Library(.a) ELF/MachO Analysis + Graceful Analysis (#2242) * Ind

No dependencies with known security vulnerabilities.

EFR10

2 years ago

ac64fb5e

pin crypto + QA

No dependencies with known security vulnerabilities.

EFR10

2 years ago

5795c8c1

QA

lief 0.13.2 has known security vulnerabilities.

Package	Installed	Affected	Info
lief	0.13.2	<0.15.0	show Affected versions of the lief package are vulnerable to Information Disclosure due to the use of an uninitialized variable in the machd_reader.c component’s name parameter. The machd_reader.c component accepts the name parameter without proper initialization, allowing leakage of potentially sensitive memory contents. A local attacker can exploit this by invoking the machd_reader functionality with a crafted name parameter, causing the LIEF package to disclose unintended information from process memory.

Package

Installed

Affected

Info

lief

0.13.2

<0.15.0

show

Affected versions of the lief package are vulnerable to Information Disclosure due to the use of an uninitialized variable in the machd_reader.c component’s name parameter. The machd_reader.c component accepts the name parameter without proper initialization, allowing leakage of potentially sensitive memory contents. A local attacker can exploit this by invoking the machd_reader functionality with a crafted name parameter, causing the LIEF package to disclose unintended information from process memory.

EFR10

2 years ago

51a2912e

Refactor Certificate + Androguard analysis

lief 0.13.2 has known security vulnerabilities.

Package	Installed	Affected	Info
lief	0.13.2	<0.15.0	show Affected versions of the lief package are vulnerable to Information Disclosure due to the use of an uninitialized variable in the machd_reader.c component’s name parameter. The machd_reader.c component accepts the name parameter without proper initialization, allowing leakage of potentially sensitive memory contents. A local attacker can exploit this by invoking the machd_reader functionality with a crafted name parameter, causing the LIEF package to disclose unintended information from process memory.

Package

Installed

Affected

Info

lief

0.13.2

<0.15.0

show

Affected versions of the lief package are vulnerable to Information Disclosure due to the use of an uninitialized variable in the machd_reader.c component’s name parameter. The machd_reader.c component accepts the name parameter without proper initialization, allowing leakage of potentially sensitive memory contents. A local attacker can exploit this by invoking the machd_reader functionality with a crafted name parameter, causing the LIEF package to disclose unintended information from process memory.

EFR10

2 years ago

89f89554

Resolve file permissions for dex

lief 0.13.2 has known security vulnerabilities.

Package	Installed	Affected	Info
lief	0.13.2	<0.15.0	show Affected versions of the lief package are vulnerable to Information Disclosure due to the use of an uninitialized variable in the machd_reader.c component’s name parameter. The machd_reader.c component accepts the name parameter without proper initialization, allowing leakage of potentially sensitive memory contents. A local attacker can exploit this by invoking the machd_reader functionality with a crafted name parameter, causing the LIEF package to disclose unintended information from process memory.

Package

Installed

Affected

Info

lief

0.13.2

<0.15.0

show

Affected versions of the lief package are vulnerable to Information Disclosure due to the use of an uninitialized variable in the machd_reader.c component’s name parameter. The machd_reader.c component accepts the name parameter without proper initialization, allowing leakage of potentially sensitive memory contents. A local attacker can exploit this by invoking the machd_reader functionality with a crafted name parameter, causing the LIEF package to disclose unintended information from process memory.

EFR10

2 years ago

66d90aea

add return

lief 0.13.2 has known security vulnerabilities.

Package	Installed	Affected	Info
lief	0.13.2	<0.15.0	show Affected versions of the lief package are vulnerable to Information Disclosure due to the use of an uninitialized variable in the machd_reader.c component’s name parameter. The machd_reader.c component accepts the name parameter without proper initialization, allowing leakage of potentially sensitive memory contents. A local attacker can exploit this by invoking the machd_reader functionality with a crafted name parameter, causing the LIEF package to disclose unintended information from process memory.

Package

Installed

Affected

Info

lief

0.13.2

<0.15.0

show

Affected versions of the lief package are vulnerable to Information Disclosure due to the use of an uninitialized variable in the machd_reader.c component’s name parameter. The machd_reader.c component accepts the name parameter without proper initialization, allowing leakage of potentially sensitive memory contents. A local attacker can exploit this by invoking the machd_reader functionality with a crafted name parameter, causing the LIEF package to disclose unintended information from process memory.