CVE:CVE-2016-1000249
Affected versions of fury-adapter-swagger have a weakness that allows an attacker to read arbitrary files off of the system. This can be used to read sensitive data, or to cause a denial of service condition by attempting to read something like /dev/zero.
solution:Upgrade fury-adapter-swagger to version 0.9.7 or higher.
solution:Avoid using experss altogether.
solution:Upgrade scroool to version 0.1.8 or higher.
solution:Avoid using erquest altogether.
solution:Upgrade quill to version 1.3.7 or higher.
solution:Upgrade @graphql-codegen/cli to version 1.2.0 or higher.
solution:Upgrade github.com/cockroachdb/cockroach/pkg/workload/querylog to version 19.2.0-beta.20190930 or higher.
solution:There is no fixed version for wuzhuang.
solution:There is no fix version for m2m-supervisor.
solution:Upgrade highcharts to version 7.2.2, 8.1.1 or higher.
solution:Avoid using jw-sha3 altogether.
solution:Upgrade ids-enterprise to version 4.23.0-dev.20191105 or higher.
solution:Avoid using next-util altogether.
solution:Avoid using bubfer-xor altogether.
solution:Upgrade sequelize to version 4.44.4 or higher.
solution:Upgrade angular to version 1.3.0-rc.5 or higher.
solution:Upgrade vuetify to version 1.5.20, 2.1.9 or higher.
solution:There is no fixed version for server-static.
solution:Upgrade github.com/cockroachdb/cockroach/pkg/sql/sqlbase to version 19.1.16, 19.2.2 or higher.
solution:There is no fixed version for tmadserver.
solution:There is no fixed version for ptest.
solution:There is no fix version for run-this-place.
solution:Avoid using buffar-xor altogether.
solution:Upgrade http-signature to version 1.0.0 or higher.
solution:Upgrade swagger-ui to version 3.18.0 or higher.
solution:Upgrade react-datepicker-plus to version 2.4.4 or higher.
solution:Upgrade ids-enterprise to version 4.18.2 or higher.
solution:Upgrade markdown-to-jsx to version 6.11.4 or higher.
solution:There is no fix version for nodeload-nmickuli.
solution:There is no fixed version for zhaolei1111.
solution:There is no fix version for contwidgetor.
solution:Upgrade diagram-js-direct-editing to version 1.4.3 or higher.
solution:Upgrade rgb2hex to version 0.1.6 or higher.
solution:Upgrade concat-with-sourcemaps to version 1.0.6 or higher.
Note This is vulnerable only for Node &lt;=4
solution:Upgrade eslint to version 4.18.2 or higher.
solution:Upgrade github.com/rclone/rclone/cmd/rcd to version 1.49.4 or higher.
solution:Upgrade angular to version 1.2.0 or higher.
solution:Upgrade mysql to version 2.3.0 or higher.
solution:There is no fixed version for wizard-syncronizer.
solution:There is no fixed version for easy-router.
solution:Upgrade superagent to version 3.8.1 or higher.
solution:Upgrade npmconf to version 2.1.3 or higher.
solution:There is no fixed version for github.com/uber/prototool/internal/protoc.
solution:Avoid using bs-sha3 altogether.
solution:Upgrade github.com/cockroachdb/cockroach/pkg/sql/sem/builtins to version 19.1.16, 19.2.2 or higher.
solution:Avoid using version 0.1.1 of angular-material-sidenav-rnd.
solution:Avoid using buffez-xor altogether.
solution:Upgrade generator-jhipster to version 6.9.0 or higher.
solution:Upgrade connect to version 2.0.0 or higher.
solution:Upgrade node-uuid to version 1.3.1 or higher.
solution:Upgrade Flask-AppBuilder to version 1.9.0 or higher.
solution:Upgrade django-request-logging to version 0.6.9 or higher.
solution:Avoid usage of this package altogether.
solution:Upgrade Amazon-Linux:2018.03 apache-commons-collections-testframework to version 0:3.2.2-3.10.amzn1 or higher.This issue was patched in ALAS-2016-692.
solution:Upgrade Amazon-Linux:2018.03 apache-commons-collections-javadoc to version 0:3.2.2-3.10.amzn1 or higher.This issue was patched in ALAS-2016-692.
solution:Upgrade Amazon-Linux:2018.03 apache-commons-collections to version 0:3.2.2-3.10.amzn1 or higher.This issue was patched in ALAS-2016-692.
solution:Upgrade django-hashid-field to version 3.1.1 or higher.
solution:Upgrade django-select2 to version 5.7.0 or higher.
solution:Upgrade fastapi to version 0.37.0 or higher.
solution:Upgrade passlib to version 1.7.3 or higher.
solution:Upgrade Flask-AppBuilder to version 1.9.3 or higher.
solution:Upgrade web.py to version 0.39 or higher.
solution:Upgrade flask-ipban to version 0.2.2 or higher.
solution:Avoid usage of this package altogether.
solution:Upgrade djoser to version 1.5.1 or higher.
solution:Upgrade cryptography to version 1.0.2 or higher.
solution:Upgrade planemo to version 0.59.0 or higher.
solution:Upgrade ecdsa to version 0.14 or higher.
solution:Upgrade easywidgets to version 0.2dev-20150922 or higher.
solution:Upgrade beaker to version 0.9.4 or higher.
solution:Avoid usage of this package altogether.
solution:Upgrade flex to verson 6.12.0 or higher.
solution:Upgrade kinto to version 8.2.3 or higher.
solution:Upgrade coveralls to version 0.1.1 or higher.
solution:Upgrade cryptography to version 0.9.1 or higher.
solution:Upgrade awscli to version 1.11.83 or higher.
solution:Upgrade `` to version 1.7 or higher.
solution:Upgrade plone-app-event to version 3.0 or higher.
solution:Upgrade restview to version 2.8.1 or higher.
solution:Upgrade django-crispy-forms to version 0.9.0 or higher.
solution:Avoid usage of this package altogether.
solution:Upgrade plone-app-discussion to version 2.4.14 or higher.
solution:Upgrade plone-app-contenttypes to version 1.2.15 or higher.
solution:Upgrade gevent to version 1.2a1 or higher.
solution:Upgrade djoser to version 1.3.2 or higher.
solution:Upgrade paste to version 0.9.5 or higher.
solution:Upgrade paste to version 1.1 or higher.
solution:Upgrade oauthlib to version 0.7.0 or higher.
solution:Upgrade pyramid to version 1.6a2 or higher.
solution:Upgrade mezzanine to version 4.3.0 or higher.
solution:Upgrade setuptools to version 1.3 or higher.
solution:Upgrade confidence to version 0.4 or higher.
solution:Upgrade msgpack to version 0.6.0 or higher.
solution:Upgrade pyro4 to version 4.72 or higher.
solution:Upgrade pyjwt to version 1.0.0 or higher.
solution:Upgrade mtprotoproxy to version 1.0.0 or higher.
solution:Upgrade setuptools to version 0.9.5 or higher.
solution:Avoid using all malicious instances of the libari package.
solution:Upgrade luigi to version 2.7.5 or higher.
solution:Upgrade buildbot to version 1.3.0 or higher.
solution:Upgrade kinto-dist to version 6.0.2 or higher.
solution:Upgrade astropy to version  3.0.1 or higher.
solution:Upgrade jupyter-server to version 0.2.0 or higher.
solution:Upgrade Werkzeug to version 0.12 or higher.
solution:Avoid using all malicious instances of the libpesh package.
solution:Upgrade sockjs-tornado to version 1.0.7 or higher.
solution:Upgrade pylint to version 2.5.0 or higher.
solution:Avoid usage of this package altogether.
solution:Avoid using all malicious instances of the libpeshnx package.
solution:Upgrade cookiecutter to version 0.1 or higher.
solution:Upgrade bootstrap-select to version 1.13.6 or higher.
solution:Avoid usage of this package altogether.
solution:Upgrade django-cors-headers to version 3.0.0 or higher.
solution:Ugrade to marked v0.3.4 or later.
solution:Upgrade knack to version 0.5.2 or higher.
solution:Upgrade codecov to version 2.0.17 or higher.
solution:Upgrade stomp.py to version 4.1.22 or higher.
solution:Upgrade henosis to version 0.0.11 or higher.
solution:Upgrade bmap to version 1.0.3 or higher.
solution:Upgrade peewee to version 2.10.0 or higher.
solution:Upgrade aspen to version 0.42 or higher.
solution:Upgrade content to version 3.0.6 or higher.
solution:There is no fixed version for Markdown-Editor.
solution:Upgrade System.ComponentModel.TypeConverter to version 2.0.0 or higher.
solution:Upgrade dateable.chronos to version 0.8 or higher.
solution:Upgrade djangorestframework-api-key to version 0.2.0 or higher.
solution:Upgrade shiftboiler to version 0.6.5 or higher.
solution:Upgrade djangorestframework to version 2.4.4 or higher.
solution:Upgrade GDAL to version 3.1.0 or higher.
solution:Avoid usage of this package altogether.
solution:Avoid usage of this package altogether.
solution:Upgrade ttrv to version 1.27.0 or higher.
solution:Avoid usage of this package altogether.
solution:Upgrade channels to version 2.1.7 or higher.
solution:Avoid usage of this package altogether.
solution:Avoid usage of this package altogether.
solution:Avoid usage of this package altogether.
solution:Upgrade Werkzeug to version 0.3.1 or higher.
solution:Avoid usage of this package altogether.
solution:Upgrade emitter-io to version 2.704 or higher.
solution:Upgrade django-storages to version 1.7 or higher.
solution:Upgrade django-registration to version 1.7 or higher.
solution:Upgrade apache-airflow to version 1.9.0 or higher.
solution:Upgrade paste to version 1.7.4 or higher.
solution:Upgrade pycryptodome to version 3.4.4 or higher.
solution:Upgrade nes to version 6.4.1 or higher.
solution:Upgrade bleach to version 2.1 or higher.
solution:Avoid using lita_onewheel-beer-baileys altogether.
solution:Avoid using blade-sauce-labs_plugin altogether.
solution:Avoid using acme_client altogether.
solution:Avoid using foot-stats altogether.
solution:Avoid using forgiving-nil altogether.
solution:Avoid using amplifypay-ruby altogether.
solution:Avoid using bisearch-enzim_hu altogether.
solution:Avoid using font_league altogether.
solution:Avoid using acme_heisenberg altogether.
solution:Upgrade html-pipeline to version 0.0.5 or higher.
solution:Upgrade katello to version 3.0.0.rc1 or higher.
solution:Avoid using capistrano_rails-subdir altogether.
solution:Avoid using font_roboto-rails altogether.
solution:Upgrade devise_invitable to version 1.3.5 or higher.
solution:Avoid using acme_pki altogether.
solution:Avoid using blacklight-advanced_search altogether.
solution:Avoid using ad-search altogether.
solution:Avoid using administrate-field-belongs-to_search altogether.
solution:Avoid using adb_sdklib altogether.
solution:Avoid using amazon_kinesis-client-ruby altogether.
solution:Upgrade rack-contrib to version 1.2.0 or higher.
solution:Avoid using adapter_elasticsearch altogether.
solution:Avoid using administrate_field-password altogether.
solution:Upgrade rack-protection to version 2.0.0.beta1 or higher.
solution:Upgrade rack to version 1.3.0.beta or higher.
solution:Upgrade coderay to version 1.1.0.rc5 or higher.
solution:Avoid using adequate-serializer altogether.
solution:Upgrade delayed_job_web to version 1.2.9 or higher.
solution:Avoid using airbrake_graylog2 altogether.
solution:Upgrade delayed_job to version 4.0.0.beta1 or higher.
solution:Avoid using age-validator altogether.
solution:Avoid using adn_cli altogether.
solution:Avoid using active-link_to altogether.
solution:Avoid using active-admin_theme altogether.
solution:Avoid using active-application altogether.
solution:Avoid using actionview-link-to_blank altogether.
solution:Avoid using ar_octopus-replication-tracking altogether.
solution:Avoid using ar_find-in-batches-with-order altogether.
solution:Upgrade rack-perftools_profiler to version 0.5.1 or higher.
solution:Avoid using arel-search altogether.
solution:Avoid using array-xml-serialization altogether.
solution:Avoid using arethusa_cli altogether.
solution:Avoid using telegram-notifications altogether.
solution:Avoid using ruboty_telegram altogether.
solution:Avoid using array_subindex altogether.
solution:Avoid using adyen_ruby-api-library altogether.
solution:Upgrade hiera to version 1.3.4 or higher.
solution:Avoid using telegram_bot-ruby altogether.
solution:Avoid using artoo_crazyflie altogether.
solution:Upgrade rack to version 1.6.0.beta or higher.
solution:Avoid using administrate_field-mobility altogether.
solution:Avoid using address-validate altogether.
solution:Avoid using rspec-candy altogether.
solution:Avoid using selenium-spider altogether.
solution:Avoid using speed-spider altogether.
solution:Avoid using resque-stuck_queue altogether.
solution:Avoid using spider-html altogether.
solution:Avoid using a1408nw-Ounennhei altogether.
solution:Avoid using 3months-staff_schedule altogether.
solution:Avoid using a1437ky-bmi3 altogether.
solution:Upgrade delayed_job_active_record to version 0.4.2 or higher.
solution:Avoid using spider_gazelle altogether.
solution:Avoid using cron_parser altogether.
solution:Avoid using 3scale-time_range altogether.
solution:Avoid using version 0.2.8 coming-soon altogether.
solution:Avoid using stuck-it_up altogether.
solution:Upgrade iodine to version 0.7.34 or higher.
solution:Upgrade nanoc to version 3.8.0 or higher.
solution:Upgrade net-http-digest_auth to version 1.3 or higher.
solution:Upgrade rinku to version 1.5.1 or higher.
solution:Upgrade appraisal to version 0.5.2 or higher.
solution:Upgrade fluentd to version 0.14.12 or higher.
solution:Avoid using aliyun-open_search altogether.
solution:Avoid using alephant_logger-statsd altogether.
solution:Avoid using algolia-places altogether.
solution:Avoid using aliyun_slb altogether.
solution:Avoid using aliyun_sdk-core altogether.
solution:Upgrade rack-cors to version 1.0.0 or higher.
solution:Avoid using application-digester altogether.
solution:Avoid using appium-lib altogether.
solution:Avoid using activemodel-ipaddr-validator altogether.
solution:Upgrade wdm to version 0.1.1 or higher.
solution:Avoid using applicant-tracking_api altogether.
solution:Avoid using application-seeds altogether.
solution:Avoid using app_deployer altogether.
solution:Avoid using apocalypse_client altogether.
solution:Avoid using application-module altogether.
solution:Avoid using apache-felix_api_client altogether.
solution:Avoid using app_cli altogether.
solution:Avoid using activerecord-globalize altogether.
solution:Avoid using approval_ratings-cli-app altogether.
solution:Avoid using apress_documentation altogether.
solution:Avoid using angular_turbolinks altogether.
solution:Avoid using applicious-utils altogether.
solution:Avoid using applogger_ruby altogether.
solution:Avoid using atacama-client altogether.
solution:Avoid using assembla-cli altogether.
solution:Avoid using allq-client altogether.
solution:Avoid using bosh-cli_plugin_consul altogether.
solution:Avoid using blinkman-twitter-search altogether.
solution:Avoid using applidget_oauth2 altogether.
solution:Avoid using attr-validator altogether.
solution:Avoid using branch-raker altogether.
solution:Avoid using bosh_plugin-generator altogether.
solution:Avoid using asset-pipeline altogether.
solution:Avoid using access-policy altogether.
solution:Avoid using bulldoggy_filesystem altogether.
solution:Avoid using brightbox_boxgrinder-plugins altogether.
solution:Avoid using activemodel-immutable-validator altogether.
solution:Avoid using bunto_press altogether.
solution:Avoid using campaign-monitor_subscriber altogether.
solution:Avoid using candy-check altogether.
solution:Avoid using acts-as_fuzzy_search altogether.
solution:Avoid using capistrano-scm-git-with_submodule_and_resolv_symlinks altogether.
solution:Avoid using acts-as_liked altogether.
solution:Avoid using acts-as_likeable altogether.
solution:Avoid using cafepress-api altogether.
solution:Avoid using applicaster_logger altogether.
solution:Upgrade wkhtmltopdf-binary-edge to version 0.12.5.1 or higher.
solution:Avoid using application-config altogether.
solution:Avoid using acts-as_better_tree altogether.
solution:Avoid using activerecord_like altogether.
solution:Avoid using chalk_rake altogether.
solution:Avoid using mars-rover_alvin altogether.
solution:Avoid using acts-as_subscribable altogether.
solution:Avoid using acts-as_publishable altogether.
solution:Avoid using living-dead altogether.
solution:Avoid using lang-cards altogether.
solution:Avoid using galvinhsiu-active-cart altogether.
solution:Avoid using bitcoin_vanity altogether.
solution:Avoid using alidns_ruby altogether.
solution:Avoid using bunto-test_plugin_malicious altogether.
solution:Avoid usage of this package altogether.
solution:Avoid using movingsign-api altogether.
solution:Avoid using capistrano_telegram altogether.
solution:Avoid using rails_test-serving altogether.
solution:Avoid using nhtsa-vin altogether.
solution:Avoid using acts-as_list_with_sti_support altogether.
solution:Avoid using jmcnevin-rghost-barcode altogether.
solution:Avoid usage of this package altogether.
solution:Avoid using activerecord_denormalize altogether.
solution:Upgrade rack to version 1.6.1 or higher.
solution:Avoid using amplitude_api altogether.
solution:Avoid using activerecord_db-tools altogether.
solution:Avoid using apple-class_client altogether.
solution:Upgrade jekyll to version 1.4.3 or higher.
solution:Avoid using game-shuffle_cards altogether.
solution:Avoid using lita_onewheel-beer-growlers altogether.
solution:Avoid using chef-partial-search altogether.
solution:Avoid using aspose-slides_cloud altogether.
solution:Avoid using apress_api altogether.
solution:Upgrade nokogiri to version 1.6.3 or higher.
solution:Avoid using apigee-cli altogether.
solution:Avoid using apod_cli altogether.
solution:Avoid using binary-search_tree altogether.
solution:Avoid using lita_onewheel-beer-abvpub altogether.
solution:Avoid using access-policy-rails altogether.
solution:Avoid using rack_envinspector altogether.
solution:Avoid using basic_stats altogether.
solution:Avoid using hello-kelvinst altogether.
solution:Avoid using beer-bash altogether.
solution:Upgrade simple_oauth to version 0.3.0 or higher.
solution:Avoid using batched-query altogether.
solution:Upgrade ftpd to version 2.0.5 or higher.
solution:Avoid using battery-growl altogether.
solution:Avoid using alias-class altogether.
solution:Avoid using beer-in_the_evening altogether.
solution:Avoid using batali_infuse altogether.
solution:Upgrade refinerycms-core to version 3.0.2 or higher.
solution:Avoid using batali_tk altogether.
solution:Upgrade devise_security_extension to version 0.10.0 or higher.
solution:Avoid using apress_moysklad altogether.
solution:Upgrade waitress to version 0.9.0b1 or higher.
solution:Upgrade pypiserver to version 1.2.6 or higher.