Security Advisories

critical2022-12-31

CVE-2017-20160-express-param vulnerable to Improper Handling of Extra Parameters

View chart

flitto/express-param · GHSA-fr54-72wr-cqvq

high2022-12-31

CVE-2018-25061-rgb2hex vulnerable to inefficient regular expression complexity

View chart

christian-bromann/rgb2hex · GHSA-7599-fqgm-v84p

medium2022-12-31

CVE-2022-4868-Froxlor Improper Authorization vulnerability

View chart

froxlor/froxlor · GHSA-w6qf-j4qr-f946

critical2022-12-31

CVE-2017-20157-Ariadne Component Library vulnerable to Server-Side Request Forgery

View chart

ariadne-cms/arc-web · GHSA-qr97-v87p-x965

medium2022-12-31

CVE-2017-20158-Yii2 FileAPI Widget vulnerable to Cross-site Scripting

View chart

vova07/yii2-fileapi-widget · GHSA-j82x-fh8h-326g

critical2022-12-31

CVE-2022-4866-usememos/memos vulnerable to Cross-site Scripting

View chart

usememos/memos · GHSA-x9p9-v3x6-68mq

critical2022-12-31

CVE-2022-4865-usememos/memos Cross-site Scripting vulnerability

View chart

usememos/memos · GHSA-8w5q-5fpq-v4pm

medium2022-12-31

CVE-2022-4867-Froxlor vulnerable to Cross-Site Request Forgery

View chart

froxlor/froxlor · GHSA-6gwx-gw56-qhf7

medium2022-12-31

CVE-2022-4864-Froxlor vulnerable to Argument Injection

View chart

froxlor/froxlor · GHSA-3v7m-2jrh-vc93

high2022-12-30

Apiman Vert.x Gateway has Transitive Hazelcast connection caching issue

View chart

apiman/apiman · GHSA-q2fj-6h62-59m2

medium2022-12-30

CVE-2022-4863-usememos/memos vulnerable to Improper Handling of Insufficient Permissions or Privileges

View chart

usememos/memos · GHSA-6whj-8g9g-5jvx

high2022-12-30

CVE-2022-46178-Path Traversal In MeterSpere leads to upload file to any path

View chart

metersphere/metersphere · GHSA-9p62-x3c5-hr5p

medium2022-12-30

prettytable-rs: Force cast a &Vec<T> to &[T] may lead to undefined behavior

View chart

phsym/prettytable-rs · GHSA-gfgm-chr3-x6px

high2022-12-30

CVE-2022-40151-XStream can cause a Denial of Service by injecting deeply nested objects raising a stack overflow

View chart

x-stream/xstream · GHSA-f8cc-g7j8-xxpm

medium2022-12-30

CVE-2022-46174-efs-utils and aws-efs-csi-driver have race condition during concurrent TLS mounts

View chart

aws/efs-utils · GHSA-4fv8-w65m-3932

medium2022-12-30

hyper-staticfile's location header incorporates user input, allowing open redirect

View chart

stephank/hyper-staticfile · GHSA-5wvv-q5fv-2388

high2022-12-30

CVE-2022-46173-Elrond-GO processing: fallback search of SCRs when not found in the main cache

View chart

elrondnetwork/elrond-go · GHSA-p228-4mrh-ww7r

critical2022-12-30

CVE-2022-44621-Apache Kylin vulnerable to Command injection by Diagnosis Controller

View chart

apache/kylin · GHSA-w9rv-xmf7-x3gh

critical2022-12-30

CVE-2017-20151-iText RUPS XML External Entity vulnerability

View chart

itext/rups · GHSA-j69f-fgh5-f7mc

high2022-12-30

CVE-2018-25060-Macaron csrf missing encryption and has sensitive cookies in HTTP session without secure attribute

View chart

go-macaron/csrf · GHSA-hhxg-px5h-jc32