Security advisories

critical2022-12-28

CVE-2014-125026-LZ4 vulnerable to Out-of-bounds Write

View chart →

cloudflare/golz4 · GHSA-4wp2-8rm2-jgmh

high2022-12-28

CVE-2019-25072-Tendermint Client package vulnerable to Uncontrolled Resource Consumption

View chart →

tendermint/tendermint · GHSA-3fm3-m23v-5r46

critical2022-12-28

CVE-2018-25046-Cloud Foundry Archiver vulnerable to path traversal

View chart →

cloudfoundry/archiver · GHSA-32qh-8vg6-9g43

medium2022-12-28

CVE-2019-25091-nsupdate.info has Sensitive Cookie Without 'HttpOnly' Flag

View chart →

nsupdate-info/nsupdate.info · GHSA-mwvp-qr62-cvjx

high2022-12-28

CVE-2022-4772-Widoco Path Traversal vulnerability

View chart →

dgarijo/widoco · GHSA-jj8r-jw42-mw4w

high2022-12-28

CVE-2022-3064-yaml package for Go can consume excessive amounts of CPU or memory

View chart →

go-yaml/yaml · GHSA-6q6q-88xp-6f2r

high2022-12-27

CVE-2020-36567-Gin's default logger allows unsanitized input that can allow remote attackers to inject arbitrary log lines

View chart →

gin-gonic/gin · GHSA-6vm3-jj99-7229

high2022-12-27

CVE-2022-4722-rdiffweb vulnerable to Authentication Bypass by Primary Weakness

View chart →

ikus060/rdiffweb · GHSA-wf33-6x33-wcf9

medium2022-12-27

CVE-2022-4694-usememos/memos vulnerable to stored Cross-site Scripting

View chart →

usememos/memos · GHSA-v92p-phmp-xffr

medium2022-12-27

CVE-2022-4729-Graphite Web Cross-site Scripting vulnerability

View chart →

graphite-project/graphite-web · GHSA-q99p-78hp-xg5c

medium2022-12-27

CVE-2022-4730-Graphite Web Cross-site Scripting vulnerability

View chart →

graphite-project/graphite-web · GHSA-m973-4vpc-x43c

critical2022-12-27

CVE-2022-4724-rdiffweb Improper Access Control vulnerability

View chart →

ikus060/rdiffweb · GHSA-m8r9-qxx8-mrxp

medium2022-12-27

CVE-2022-4734-usememos/memos may leak user information to an authenticated user

View chart →

usememos/memos · GHSA-j593-h5v3-45x6

high2022-12-27

CVE-2022-4720-rdiffweb vulnerable to Open Redirect

View chart →

ikus060/rdiffweb · GHSA-h5wp-jrqc-cwwx

critical2022-12-27

CVE-2022-4725-AWS SDK is vulnerable to server-side request forgery (SSRF)

View chart →

aws-amplify/aws-sdk-android · GHSA-f5h9-qx38-2hgp

medium2022-12-27

CVE-2022-4695-usememos/memos vulnerable to stored Cross-site Scripting

View chart →

usememos/memos · GHSA-c2v4-8r9g-g5xj

medium2022-12-27

CVE-2022-4691-usememos/memos vulnerable to stored Cross-site Scripting

View chart →

usememos/memos · GHSA-97rc-mm5j-f6rj

high2022-12-27

CVE-2022-4732-Microweber vulnerable to unrestricted malicious uploads

View chart →

microweber/microweber · GHSA-8h43-xg5g-9cj7

medium2022-12-27

CVE-2022-4721-rdiffweb vulnerable to Special Element Injection

View chart →

ikus060/rdiffweb · GHSA-83pm-7v48-5jp4

high2022-12-27

CVE-2022-4723-rdiffweb has no rate limit on resend email feature

View chart →

ikus060/rdiffweb · GHSA-7q4r-x5qg-mmcp