Security advisories

low2023-01-20

CVE-2023-22733-Shopware's log module vulnerable to Improper Output Neutralization

View chart →

shopware/platform · GHSA-7cp7-jfp6-jh4f

critical2023-01-20

CVE-2023-22727-CakePHP Database\\Query::offset() and limit() methods are vulnerable to SQL injection

View chart →

cakephp/cakephp · GHSA-6g8q-qfpv-57wp

high2023-01-20

CVE-2023-22499-Deno is vulnerable to race condition via interactive permission prompt spoofing

View chart →

denoland/deno · GHSA-mc52-jpm2-cqh6

medium2023-01-20

CVE-2023-0323-pimcore is vulnerable to cross-site scripting via "title field " in data objects

View chart →

pimcore/pimcore · GHSA-6vf6-g3pr-j83h

high2023-01-20

CVE-2023-22726-act vulnerable to arbitrary file upload in artifact server

View chart →

nektos/act · GHSA-pc99-qmg4-rcff

medium2023-01-20

[email protected]/qwik vulnerable to Cross-site Scripting

View chart →

builderio/qwik · GHSA-hm7f-rq7q-j9xp

critical2023-01-19

CVE-2022-47105-Jeecg-boot is vulnerable to SQL injection

View chart →

jeecgboot/jeecg-boot · GHSA-6w89-c65w-jx2c

medium2023-01-19

CVE-2023-0406-Cross-Site Request Forgery in modoboa

View chart →

modoboa/modoboa · GHSA-g298-59pg-93h7

high2023-01-19

CVE-2009-4123-jruby-openssl gem for JRuby fails to do proper certificate validation

View chart →

jruby/jruby-openssl · GHSA-xgv7-pqqh-h2w9

medium2023-01-19

CVE-2023-0398-Modoboa is vulnerable to Cross-Site Request Forgery

View chart →

modoboa/modoboa · GHSA-v9gj-5rgp-w33r

medium2023-01-19

CVE-2023-0290-Velociraptor subject to Path Traversal

View chart →

velocidex/velociraptor · GHSA-7jf5-fvgf-48c6

high2023-01-18

CVE-2023-0242-Velociraptor vulnerable to Missing Authorization

View chart →

velocidex/velociraptor · GHSA-g5vm-525q-r66c

medium2023-01-18

CVE-2022-47950-OpenStack Swift XML external entities (XXE) Injection

View chart →

openstack/swift · GHSA-274c-rx2j-2v3x

low2023-01-18

CVE-2022-44571-Denial of Service Vulnerability in Rack Content-Disposition parsing

View chart →

rack/rack · GHSA-93pm-5p5f-3ghx

low2023-01-18

CVE-2023-22792-ReDoS based DoS vulnerability in Action Dispatch

View chart →

rails/rails · GHSA-p84v-45xj-wwqj

low2023-01-18

CVE-2023-22796-ReDoS based DoS vulnerability in Active Support's underscore

View chart →

rails/rails · GHSA-j6gc-792m-qgm2

medium2023-01-18

CVE-2023-22797-Open Redirect Vulnerability in Action Pack

View chart →

rails/rails · GHSA-9445-4cr6-336r

high2023-01-18

CVE-2022-44566-Denial of Service Vulnerability in ActiveRecord's PostgreSQL adapter

View chart →

rails/rails · GHSA-579w-22j4-4749

low2023-01-18

CVE-2023-22795-ReDoS based DoS vulnerability in Action Dispatch

View chart →

rails/rails · GHSA-8xww-x3g3-6jcv

high2023-01-18

CVE-2023-22794-SQL Injection Vulnerability via ActiveRecord comments

View chart →

rails/rails · GHSA-hq7p-j377-6v63