~ / search / GHSA-hpf7-4c2g-9chf

GHSA-hpf7-4c2g-9chf

Remote Code Execution in Halibut

Source: GitHub Advisory Database (reviewed) Critical CVE-2021-31819

Packages

EcosystemPackageAffectedFixed in
NuGet Halibut < 4.4.7 4.4.7

Details

As written in the advisory (Markdown source, shown as plain text).

In Halibut versions prior to 4.4.7 there is a deserialisation vulnerability that could allow remote code execution on systems that already trust each other based on certificate verification.

References

External links from the advisory. They lead to third-party sites.