Security advisories

medium2023-01-07

CVE-2023-0112-usememos/memos vulnerable to stored Cross-site Scripting

View chart →

usememos/memos · GHSA-9h7x-9pmh-7gg8

medium2023-01-06

CVE-2023-22466-Tokio reject_remote_clients configuration may get dropped when creating a Windows named pipe

View chart →

tokio-rs/tokio · GHSA-7rrj-xr53-82p7

critical2023-01-06

CVE-2018-25068-globalpom-utils has Insecure Temporary File

View chart →

devent/globalpom-utils · GHSA-jjvp-wfp8-rv69

high2023-01-06

CVE-2023-22465-Http4s improperly parses User-Agent and Server headers

View chart →

http4s/http4s · GHSA-54w6-vxfh-fw7f

critical2023-01-06

CVE-2014-125051-himiklab yii2-jqgrid-widget vulnerable to SQL Injection

View chart →

himiklab/yii2-jqgrid-widget · GHSA-7mg5-rw39-q67f

critical2023-01-06

CVE-2023-22463-KubePi allows malicious actor to login with a forged JWT token via Hardcoded Jwtsigkeys

View chart →

kubeoperator/kubepi · GHSA-vjhf-8vqx-vqpq

critical2023-01-06

CVE-2023-22457-XWiki CKEditor.HTMLConverter vulnerable to Remote Code Execution via Cross-Site Request Forgery

View chart →

xwiki-contrib/application-ckeditor · GHSA-6mjp-2rm6-9g85

critical2023-01-06

CVE-2015-10018-DBRisinajumi d2files SQL Injection vulnerability

View chart →

dbrisinajumi/d2files · GHSA-68hv-8926-j34c

medium2023-01-06

CVE-2022-45935-Apache James server allows an attacker with local access to access private user data in transit

View chart →

apache/james-project · GHSA-v6vp-62vc-84qw

medium2023-01-06

CVE-2022-45787-Apache James MIME4J vulnerable to information disclosure to local users

View chart →

apache/james-mime4j · GHSA-q84x-3476-8ff2

critical2023-01-06

CVE-2018-25066-nodebatis SQL Injection vulnerability

View chart →

petermu/nodebatis · GHSA-8ph8-9q2j-c3rq

critical2023-01-06

CVE-2016-15011-dssp vulnerable to Improper Restriction of XML External Entity Reference

View chart →

e-contract/dssp · GHSA-77cc-w3wm-6whp

critical2023-01-06

CVE-2022-25923-exec-local-bin vulnerable to Command Injection

View chart →

saeedseyfi/exec-local-bin · GHSA-f259-h6m8-hm8m

medium2023-01-06

CVE-2021-32828-Nuxeo vulnerable to Reflected Cross-Site Scripting leading to Remote Code Execution

View chart →

nuxeo/nuxeo · GHSA-x347-fc9w-w7c3

critical2023-01-05

CVE-2020-36640-bonita-connector-webservice XML External Entity vulnerability

View chart →

bonitasoft/bonita-connector-webservice · GHSA-wg99-5vrx-j2gg

medium2023-01-05

CVE-2017-20162-Vercel ms Inefficient Regular Expression Complexity vulnerability

View chart →

vercel/ms · GHSA-w9mr-4mfr-499f

critical2023-01-05

CVE-2020-36641-aXMLRPC XML External Entity vulnerability

View chart →

gturri/axmlrpc · GHSA-g4r8-28fp-f255

high2023-01-05

CVE-2021-4305-robots-txt-guard Inefficient Regular Expression Complexity vulnerability

View chart →

woorank/robots-txt-guard · GHSA-6g33-8w2q-4hxv

high2023-01-05

CVE-2023-22461-@mattkrick/sanitize-svg vulnerable to Cross-Site Scripting (XSS)

View chart →

mattkrick/sanitize-svg · GHSA-h857-2g56-468g

medium2023-01-05

CVE-2023-22460-go-ipld-prime/codec/json may panic if asked to encode bytes

View chart →

ipld/go-ipld-prime · GHSA-c653-6hhg-9x92