Security advisories

medium2023-01-23

CVE-2022-46959-Path Traversal in github.com/go-sonic/sonic

View chart →

go-sonic/sonic · GHSA-2x48-p6cq-5xcw

critical2023-01-23

CVE-2023-0435-Excessive Attack Surface in pyload-ng

View chart →

pyload/pyload · GHSA-6jmx-pv77-wm5w

medium2023-01-22

CVE-2023-0434-Improper Input Validation in pyload-ng

View chart →

pyload/pyload · GHSA-x9vc-5q77-m7x4

critical2023-01-21

CVE-2023-22884-Command Injection in Apache Airflow and Apache Airflow MySQL Provider

View chart →

apache/airflow · GHSA-c732-xvv8-g94c

high2023-01-21

CVE-2020-36655-Command injection in yiisoft/yii2-gii

View chart →

yiisoft/yii2-gii · GHSA-3mpg-q26j-83j5

medium2023-01-20

git2-rs fails to verify SSH keys by default

View chart →

rust-lang/git2-rs · GHSA-m4ch-rfv5-x5g3

medium2023-01-20

CakePHP vulnerable to Cross-site Scripting in some development error pages

View chart →

cakephp/cakephp · GHSA-xwhj-pqcg-8rcr

medium2023-01-20

CakePHP vulnerable to Remote File Inclusion through View template name manipulation

View chart →

cakephp/cakephp · GHSA-p76f-wr22-4rv6

medium2023-01-20

CakePHP allows direct access of prefixed controller actions

View chart →

cakephp/cakephp · GHSA-6hg4-vp5q-47mw

high2023-01-20

CakePHP vulnerable to Denial of Service attack through XML payloads

View chart →

cakephp/cakephp · GHSA-q79m-c546-2g63

medium2023-01-20

CakePHP SecurityComponent cross form submission issue

View chart →

cakephp/cakephp · GHSA-j9q2-f9q7-jhgq

medium2023-01-20

CVE-2023-22734-Shopware has Improper Input Validation issue in newsletter subscription

View chart →

shopware/platform · GHSA-46h7-vj7x-fxg2

low2023-01-20

CVE-2023-22732-Shopware has Insufficient Session Expiration in Administration

View chart →

shopware/platform · GHSA-59qg-93jg-236f

medium2023-01-20

CakePHP has incorrect Cross-Site Request Forgery validation

View chart →

cakephp/cakephp · GHSA-829q-v5g8-hhxc

medium2023-01-20

ELF header parsing library doesn't check for valid offset

View chart →

vincenthouyi/elf_rs · GHSA-g6pw-999w-j75m

medium2023-01-20

CVE-2022-23538-scs-library-client may leak user credentials to third-party service via HTTP redirect

View chart →

sylabs/scs-library-client · GHSA-7p8m-22h4-9pj7

medium2023-01-20

bumpalo has use-after-free due to a lifetime error in `Vec::into_iter()`

View chart →

fitzgen/bumpalo · GHSA-f85w-wvc7-crwc

critical2023-01-20

CVE-2020-23256-electerm allows unauthorized users to execute arbitrary commands

View chart →

electerm/electerm · GHSA-x73w-g8hx-v7rp

high2023-01-20

ExifTool vulnerable to arbitrary code execution

View chart →

exiftool-rb/exiftool_vendored.rb · GHSA-q95h-cqrv-8jv5

high2023-01-20

CVE-2022-47747-Kraken has arbitrary file read vulnerability via component testfs

View chart →

uber/kraken · GHSA-hj4g-4w36-x8hp