DIYgod vulnerabilities
We track 3 vulnerabilities in DIYgod products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on September 26, 2024.
Latest DIYgod vulnerabilities
- 8.8 High severity
RSSHub is an RSS network. Prior to commit 64e00e7, RSSHub's `docker-test-cont.yml` workflow is…
RSSHub is an RSS network. Prior to commit 64e00e7, RSSHub's `docker-test-cont.yml` workflow is vulnerable to Artifact Poisoning, which could have lead to a full repository takeover. Downstream users of RSSHub are not vulnerable to this issue, and commit 64e00e
- 7.5 High severity
RSSHub: Server-Side Request Forgery
RSSHub is an open source RSS feed generator. RSSHub is vulnerable to Server-Side Request Forgery (SSRF) attacks. This vulnerability allows an attacker to send arbitrary HTTP requests from the server to other servers or resources on the network. An attacker can
- 7.5 High severity
RSSHub: Inefficient Regular Expression Complexity
RSSHub is an open source, extensible RSS feed generator. In commits prior to 5c4177441417 passing some special values to the `filter` and `filterout` parameters can cause an abnormally high CPU. This results in an impact on the performance of the servers and R