Haskell - vulnerabilities (CVEs)

4 CVEs in 4 products, 0 in the last 30 days, newest from 2024-04-10.

Products

• Aeson - 1 CVEs
• Hs-tls - 1 CVEs
• Process Library - 1 CVEs
• Xml-conduit - 1 CVEs

Newest CVEs of Haskell

• CVE-2024-3566 - CVSS 9.8 (critical), 2024-04-10: A command inject vulnerability allows an attacker to perform command injection on Windows applications that indirectly depend on the CreateProcess function…
• CVE-2021-4249 - CVSS 7.5 (high), 2022-12-18: A vulnerability was found in xml-conduit. It has been classified as problematic. Affected is an unknown function of the file…
• CVE-2022-3433 - CVSS 6.5 (medium), 2022-10-10: The aeson library is not safe to use to consume untrusted JSON input. A remote user could abuse this flaw to produce a hash collision in the underlying…
• CVE-2013-0243 - CVSS 7.4 (high), 2019-12-05: haskell-tls-extra before 0.6.1 has Basic Constraints attribute vulnerability may lead to Man in the Middle attacks on TLS connections