About

Alphabot Security supports developers by continuously looking at open-source technologies in order to identify new vulnerabilities and improve their supply chain security.

Discovered Vulnerabilities

(This list is not complete.)

• CVE-2021-26423: Microsoft .NET Core: Remote Denial of Service Vulnerability
• CVE-2021-22160: Apache Pulsar: Improper Verification of Cryptographic Signature
• CVE-2020-15150: Paginator (for Elixir Ecto): Remote Code Execution Vulnerability
• CVE-2020-11050: Java-WebSocket: Improper Validation of Certificate with Host Mismatch
• CVE-2020-9488: Apache Log4j: Improper validation of certificate with host mismatch
• CVE-2020-2252: Jenkins: Missing hostname validation in Mailer Plugin
• CVE-2020-1758: Keycloak: Improper validation of certificate with host mismatch
• CVE-2018-17187: Apache Qpid Proton-J: Transport TLS wrapper hostname verification mode not implemented
• CVE-2018-11775: ActiveMQ Client: Missing TLS Hostname Verification
• CVE-2018-11087: RabbitMQ (Spring-AMQP): Missing Host name verification
• CVE-2018-8540: Microsoft .NET Framework: Remote Code Injection Vulnerability

Contact

Contact Alphabot Security:
security@alphabot.com

PGP

Download PGP Public Key

Key Fingerprint: AB4D A1E3 CEC2 C2E0 FA4D CCD6 D70B CE4F ABB1 3E56