Qwerty472123

**Name of the Vulnerable Software and Affected Versions** @fastify/reply-from versions prior to 9.6.0 **Description** The issue arises when a reverse proxy server built with `@fastify/reply-from` misinterprets the incoming body by passing a header `ContentType: application/json ; charset=utf-8`, potentially leading to the bypass of security checks. This occurs because `@fastify/reply-from` does not unify the parsing of Content-Type with the main Fastify repository, which uses `fast-content-type-parse` to trim after splitting. As a result, the lack of trimming in `@fastify/reply-from` can cause misinterpretation. **Recommendations** For versions prior to 9.6.0, update to version 9.6.0 or later to resolve the issue. As a temporary workaround, consider restricting the use of the `@fastify/reply-from` plugin until the update can be applied. Additionally, avoid using the `ContentType` header with the `application/json ; charset=utf-8` value in the affected API endpoints until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** KernelSU versions 0.7.1 and prior **Description** KernelSU is a Kernel-based root solution for Android devices. The logic of getting the apk path in the KernelSU kernel module can be bypassed, allowing any malicious apk named `me.weishu.kernelsu` to gain root permission. If a device with the KernelSU module installed attempts to install any unverified apk with a package name equal to the official KernelSU Manager, it can assume root privileges on the device. **Recommendations** For KernelSU versions 0.7.1 and prior, at the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting the installation of apks with package names equal to the official KernelSU Manager to minimize the risk of exploitation. Avoid installing unverified apks, especially those named `me.weishu.kernelsu`, until a patch is available.

**Name of the Vulnerable Software and Affected Versions** KernelSU versions 0.6.1 through 0.6.x **Description** The issue arises from a flaw in the signature verification logic of KernelSU, allowing malware with specially constructed app signing blocks to gain root privileges on infected devices. This occurs because the verification logic obtains the signature of the last block with an id of `0x7109871a`, whereas during Android installation, it obtains the first one. Additionally, there are problems with signature downgrading, where KernelSU mistakenly identifies a V1 signature as V2. This can lead to a situation where the signature is not found, but KernelSU believes a V2 signature exists, while the actual verification uses a V1 signature. **Recommendations** For KernelSU versions 0.6.1 through 0.6.x, update to version 0.7.0 to resolve the issue. As a temporary workaround, keep the KernelSU manager installed and avoid installing unknown apps to minimize the risk of exploitation.