CVE and update status of the FreeBSD ports tree4,526 unaddressed CVEs in 616 portsAll times are CET

Port details

security/ffuf2.3.0_1

Fast web fuzzer written in Go

Maintainer
dutra@FreeBSD.org
Packages
ffuf 2.3.0_1
Upstream
up to date
CPE
none, CVEs only via VuXML
WWW
https://github.com/ffuf/ffuf
Links
cgit · VuXML

Unaddressed (0) · The CVE record lists this version as affected, no VuXML entry names the CVE

None. There is no CVE without a VuXML entry for this version.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (0)

No VuXML entries for this package.

Commits (61)

Dag-Erling Smørgrav (des) · 2.3.0_1
various: Bump Go ports for Go 1.26.10 / 1.27.3
d81b7ba3c3
Gabriel M. Dutra (dutra) · 2.3.0
security/ffuf: Update to 2.3.0

ChangeLog:
https://github.com/ffuf/ffuf/releases/tag/v2.3.0
aeebc7a7e7
Dag-Erling Smørgrav (des) · 2.2.1_2
various: Bump Go ports
031fc6bfbf
Adam Weinberger (adamw) · 2.2.1_1
many: Bump go ports for 1.26.8 and 1.27.1
dd0905142a
Gabriel M. Dutra (dutra) · 2.2.1
security/ffuf: Update to 2.2.1

ChangeLog:
https://github.com/ffuf/ffuf/releases/tag/v2.2.1
a0244613b1
Dag-Erling Smørgrav (des) · 2.1.0_29
various: Bump go ports for go-1.25.14 / 1.26.7
4867821cd6
Dag-Erling Smørgrav (des) · 2.1.0_28
various: Bump go ports for go-1.25.13 / 1.26.6
6d39dcf04e
Dag-Erling Smørgrav (des) · 2.1.0_27
various: Bump go ports for go-1.25.12 / 1.26.5
4ea3547132
Dag-Erling Smørgrav (des) · 2.1.0_26
various: Bump go ports for go-1.25.11 / go-1.26.4
dd8dc2a59d
Adam Weinberger (adamw) · 2.1.0_25
various: Bump ports for Go 1.25.10
4e243a83f8
Dag-Erling Smørgrav (des) · 2.1.0_24
various: Bump go ports for go-1.25.9 / 1.26.2
7507e72a84
Adam Weinberger (adamw) · 2.1.0_23
various: Bump ports for Go 1.25.8
a8d318da7c
Adam Weinberger (adamw) · 2.1.0_22
various: Bump ports for Go default 1.24->1.25
97685c1886
Adam Weinberger (adamw) · 2.1.0_21
various: Bump Go ports for 1.24.13
529df949a5
Adam Weinberger (adamw) · 2.1.0_20
various: Bump Go ports for 1.24.12
013f2d30b0
Adam Weinberger (adamw) · 2.1.0_19
various: Bump Go ports for 1.24.11
b24429e3ed
Adam Weinberger (adamw) · 2.1.0_18
various: Bump Go ports for 1.24.10
0dfced16fb
Adam Weinberger (adamw) · 2.1.0_17
various: Bump go ports for go-1.24.9
90f976619b
Adam Weinberger (adamw) · 2.1.0_16
many: Bump dependent ports after go124 update
2e7587aaf8
Adam Weinberger (adamw) · 2.1.0_15
many: Bump go ports for go-1.24.7
31a5a229a7
Adam Weinberger (adamw) · 2.1.0_14
go ports: Bump for 1.24.6
53610681ea
Adam Weinberger (adamw) · 2.1.0_13
many: Bump PORTREVISION for go-1.24.5 update
275975297b
Adam Weinberger (adamw) · 2.1.0_12
various: Bump PORTREVISION after go124-1.24.4 update
94be418de3
Adam Weinberger (adamw) · 2.1.0_11
go: Bump go124-dependent ports

Earlier I bumped the default Go to 1.24. Ports that specify a lower
version will still build with those lower version (for now), so they
don't need a bumping. Instead I'm bumping anything that (now) has go124
as a dependency.
0bdd2ad334
Adam Weinberger (adamw) · 2.1.0_10
go: Bump ports for go124 update
a4e30d4f4f
Adam Weinberger (adamw) · 2.1.0_9
Bump all go ports for yesterday's releases
d0642a6176
Ashish SHUKLA (ashish) · 2.1.0_8
all: Bump after lang/go121 update
aa8c0111bf
Ashish SHUKLA (ashish) · 2.1.0_7
all: Bump after lang/go121 update
c4b51c2028
Ashish SHUKLA (ashish) · 2.1.0_6
all: Bump after lang/go121 update

MFH:		2024Q2
746fa696a1
Ashish SHUKLA (ashish) · 2.1.0_5
all: Bump after lang/go121 update

MFH:		2024Q2
fce0cc3272
Ashish SHUKLA (ashish) · 2.1.0_4
all: Bump after lang/go121 update

MFH:		2024Q2
32b284679a
Muhammad Moinur Rahman (bofh) · 2.1.0_3
lang/go: Change DEFAULT to 1.21

PR:		277776
Approved by:	portmgr (exp-run)
a5a000df3b
Ashish SHUKLA (ashish) · 2.1.0_2
all: Bump PORTREVISION after lang/go* update

PR:		276530
7e5aa2085f
Gabriel M. Dutra (dutra) · 2.1.0_1
*/*: Update maintainer email address

Update email from nulldutra@proton.me to dutra@FreeBSD.org

Approved by:	dbaio(mentor), garga(mentor)
Differential Revision:	https://reviews.freebsd.org/D43485
5514fc8b15
Ashish SHUKLA (ashish) · 2.1.0_1
all: Bump PORTREVISION after lang/go* update

PR:		274405
0505b712df
Fernando Apesteguía (fernape) · 2.1.0
security/ffuf: Update to 2.1.0

ChangeLog: https://github.com/ffuf/ffuf/releases/tag/v2.1.0

 * Prepare for v2.1.0 release
 * Default to match 2XX
 * Report if request times out while time matcher / filter is active
 * [FEATURE] Extensible Auto-calibration strategies
 * allow unused wordlist in config file
 * Don't write a finishing newline in silent mode
 * Add -raw cli flag
 * Automatic brotli and deflate decompression
 * Fix #718
 * fix csv output file format
 * Fixed Error for HTML Output
 * Fix Issue696 -- Divide by 0 Error when setting rate to 0 manually
 * Add cert authentication to crawl
 * Pencode
 * Fix md output format
 * bump golang.org/x/net from 0.5.0 to 0.7.0
 * Add additional check for keywords when using sniper mode
 * Support older versions of TLS regardless of Go defaults
 * [Fix] Fixed multiline output when using only one fuzz variable
 * Fix HTML output

PR:		274448
Reported by:	nulldutra@proton.me (maintainer)
7bbe011b6c
Dmitri Goutnik (dmgk) · 2.0.0_6
all: Bump PORTREVISION after lang/go* update
8e4bc57934
Dmitri Goutnik (dmgk) · 2.0.0_5
all: Bump PORTREVISION after lang/go{119,120} update
09b993031a
Fernando Apesteguía (fernape) · 2.0.0_4
*/*: Updating maintainer address

PR:		272055
Reported by:	nulldutra@proton.me (maintainer)
67ce6e5e1c
Dmitri Goutnik (dmgk) · 2.0.0_3
all: Bump PORTREVISION after lang/go{119,120} update
ff40d94c1d
Dmitri Goutnik (dmgk) · 2.0.0_2
all: Bump PORTREVISION after Go ports update
09079730e9
Dmitri Goutnik (dmgk) · 2.0.0_1
all: Bump PORTREVISION after lang/go{119,120} update
56b5ec772f
Fernando Apesteguía (fernape) · 2.0.0
security/ffuf: Update to 2.0.0

ChangeLog: https://github.com/ffuf/ffuf/releases/tag/v2.0.0

 * Fix the v2 tagging for go install
 * Fix required go version
 * Prepare for v2.0 release
 * Gracefully error in case stdin is used for search result
 * Scraper functionality
 * Added additional proxy URL verification
 * Typo fix
 * fix: changed usage from version 1.3.0 to version 1.5.0
 * Change precedence of quiet and JSON output to favour JSON
 * Add homebrew install method
 * Fix time-based matcher
 * Sniper template parsing - fixes #579
 * New functionality to map fired blind payloads back to the initial request
 * Fix jsonlines output while in silent mode
 * Enhanced rate limiting
 * Fix the ac for good now
 * Fix linter workflow and autocalibration for lines & words match

PR:		269429
Reported by:	0xdutra@gmail.com (maintainer)
d30619ba8b
Dmitri Goutnik (dmgk) · 1.5.0_8
all: Bump PORTREVISION after GO_DEFAULT update.
2297efc51b
Dmitri Goutnik (dmgk) · 1.5.0_7
all: Bump PORTVERSION after lang/go{118,119} update
3b383d833a
Dmitri Goutnik (dmgk) · 1.5.0_6
all: Bump PORTREVISION after lang/go{118,119} update
d9ad1002d5
Dmitri Goutnik (dmgk) · 1.5.0_5
all: Bump PORTREVISION after lang/go{118,119} update
bde51869ee
Dmitri Goutnik (dmgk) · 1.5.0_4
all: Bump PORTREVISION after lang/go{118,119} update
f05c98fffb
Stefan Eßer (se) · 1.5.0_3
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 1.5.0_3
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0