Leowsy-Hashblue

**Name of the Vulnerable Software and Affected Versions** Bilibili Desktop versions prior to 1.18.0 **Description** The software disables TLS certificate verification across the entire process and executes unsigned remote JavaScript configurations without performing integrity checks. An attacker positioned on the network path can intercept configuration requests to inject arbitrary JavaScript. This code is executed in the renderer with access to the privileged IPC (Inter-Process Communication) bridge, which allows for the execution of system commands or the theft of login credentials. **Recommendations** Update Bilibili Desktop to a version later than 1.18.0.

**Name of the Vulnerable Software and Affected Versions** APITable versions prior to 1.13.0-beta.1 **Description** The software exposes the internal organization 'loadOrSearch' endpoint without authentication. This allows unauthenticated attackers to retrieve member names, email addresses, and team hierarchy. By querying the endpoint with space identifiers obtained from shared links or public templates, attackers can enumerate the complete member directory of any workspace. **Recommendations** Update to a version later than 1.13.0-beta.1. As a temporary mitigation, restrict access to the 'loadOrSearch' endpoint.

**Name of the Vulnerable Software and Affected Versions** Bilibili Desktop version 1.17.9 **Description** A remote attacker can execute arbitrary code through the `bili-inject.js` and `bili-bridge.js` components. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** apache-airflow-providers-git versions prior to 0.4.1 **Description** The Apache Airflow Git provider performs git-over-SSH operations with `StrictHostKeyChecking=no` by default, which disables SSH host-key verification. This allows an attacker capable of intercepting the network path between an Airflow worker and the Git server to perform a man-in-the-middle attack. Such an attack could lead to the capture of the SSH deploy key or the injection of malicious repository content. This issue affects deployments utilizing the Git DAG bundle or Git provider to clone over SSH using a deploy key. **Recommendations** Update to apache-airflow-providers-git version 0.4.1 or later and configure a `known hosts` file.