PatchTheCVEtag project vulnerabilities
Recent CVEs affecting tag project products. 4 tracked.
tag project has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 4. Most recent: 2020-12-28. Highest priority: CVE-2020-29245 (score 44/100).
- CVE-2020-29245 MEDIUM 6.5 UPGRADE dhowden tag before 2020-11-19 allows "panic: runtime error: slice bounds out of range" via readAtomData.
- CVE-2020-29244 MEDIUM 6.5 UPGRADE dhowden tag before 2020-11-19 allows "panic: runtime error: slice bounds out of range" via readTextWithDescrFr
- CVE-2020-29243 MEDIUM 6.5 UPGRADE dhowden tag before 2020-11-19 allows "panic: runtime error: index out of range" via readAPICFrame.
- CVE-2020-29242 MEDIUM 6.5 UPGRADE dhowden tag before 2020-11-19 allows "panic: runtime error: index out of range" via readPICFrame.
FAQ
How do I fix tag project vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is tag project being exploited right now?
None of the tracked tag project CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which tag project CVE should I patch first?
CVE-2020-29245 currently ranks highest (44/100): dhowden tag before 2020-11-19 allows "panic: runtime error: slice bounds out of range" via readAtomData..