guarddog
PyPI · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| GuardDog has a blind GitHub URL rewrite in remote project scanning causes SSRF and `GH_TOKEN` exfiltration | guarddog | PyPI | High | No fix reported | |
| GuardDog: Unsanitized human-readable scan output allows terminal escape injection from malicious package content | guarddog | PyPI | Medium | No fix reported | |
| GuardDog Path Traversal Vulnerability Leads to Arbitrary File Overwrite and RCE | guarddog | PyPI | High | Fix reported | |
| GuardDog Zip Bomb Vulnerability in safe_extract() Allows DoS | guarddog | PyPI | High | Fix reported | |
| GuardDog vulnerable to arbitrary file write when scanning a specially-crafted PyPI package | guarddog | PyPI | Low | Fix reported | |
| GuardDog vulnerable to arbitrary file write when scanning a specially-crafted remote PyPI package | guarddog | PyPI | Low | Fix reported |