Security advisories

high2023-01-18

CVE-2022-44570-Denial of service via header parsing in Rack

View chart →

rack/rack · GHSA-65f5-mfpf-vfhj

low2023-01-18

CVE-2022-44572-Denial of service via multipart parsing in Rack

View chart →

rack/rack · GHSA-rqv2-275x-2jq5

low2023-01-18

CVE-2023-22799-ReDoS based DoS vulnerability in GlobalID

View chart →

rails/globalid · GHSA-23c2-gwp5-pxw9

medium2023-01-18

CVE-2022-25901-cookiejar Regular Expression Denial of Service via Cookie.parse function

View chart →

bmeck/node-cookiejar · GHSA-h452-7996-h45h

medium2023-01-18

CVE-2018-25077-mel-spintax has Inefficient Regular Expression Complexity

View chart →

melnaron/mel-spintax · GHSA-qjm7-55vv-3c5f

high2023-01-18

CVE-2020-36651-Path Traversal in web-node-server

View chart →

youngerheart/nodeserver · GHSA-3fwq-qv5v-2wxf

high2023-01-18

CVE-2021-32837-mechanize Regular Expression Denial of Service vulnerability

View chart →

python-mechanize/mechanize · GHSA-g3pv-pj5f-3hfq

critical2023-01-17

CVE-2023-22731-Shopware vulnerable to Improper Control of Generation of Code in Twig rendered views

View chart →

shopware/platform · GHSA-93cw-f5jj-x85w

medium2023-01-17

CVE-2023-22730-Shopware vulnerable to Improper Input Validation of Clearance sale in cart

View chart →

shopware/platform · GHSA-8r6h-m72v-38fg

medium2023-01-17

CVE-2022-4891-Sisimai Inefficient Regular Expression Complexity vulnerability

View chart →

sisimai/rb-sisimai · GHSA-vm74-j4wq-82xj

high2023-01-17

CVE-2022-47318-Code injection in ruby git

View chart →

ruby-git/ruby-git · GHSA-pphf-gfrm-v32r

medium2023-01-17

CVE-2023-22298-pgAdmin 4 Open Redirect vulnerability

View chart →

pgadmin-org/pgadmin4 · GHSA-894c-rg7f-3c62

medium2023-01-17

CVE-2010-10008-simplesamlphp-module-openidprovider Cross Site Scripting vulnerability

View chart →

simplesamlphp/simplesamlphp-module-openidprovider · GHSA-chgc-rqjr-46gg

medium2023-01-16

CVE-2022-41703-Apache Superset's SQL Alchemy connector vulnerable to SQL Injection

View chart →

apache/superset · GHSA-cxvp-3frm-3876

medium2023-01-16

CVE-2022-43717-Apache Superset vulnerable to Cross-site Scripting

View chart →

apache/superset · GHSA-9f88-wg5r-947j

critical2023-01-16

CVE-2016-15020-SQL Injection in liftkit/database

View chart →

liftkit/database · GHSA-8hcf-2m4v-f2rq

medium2023-01-16

CVE-2022-43718-Apache Superset is vulnerable to Cross-Site Scripting (XSS)

View chart →

apache/superset · GHSA-79x5-cv79-49rj

high2023-01-16

CVE-2022-43719-Apache Superset vulnerable to Cross-Site Request Forgery via legacy REST API endpoints

View chart →

apache/superset · GHSA-7222-r37x-8q3m

medium2023-01-16

CVE-2022-43720-Apache Superset vulnerable to Injection

View chart →

apache/superset · GHSA-fpmr-qmgh-42x2

medium2023-01-16

CVE-2022-43721-Apache Superset Open Redirect vulnerability

View chart →

apache/superset · GHSA-fcg4-pm6h-9xx2