Security advisories

medium2022-12-27

CVE-2022-4728-Graphite Web Cross-site Scripting vulnerability

View chart →

graphite-project/graphite-web · GHSA-3c5x-4hvx-qrrr

medium2022-12-27

CVE-2022-4719-rdiffweb vulnerable to Business Logic Errors

View chart →

ikus060/rdiffweb · GHSA-2wpw-cm9w-v4xm

high2022-12-27

CVE-2022-4767-usememos/memos Denial of Service vulnerability

View chart →

usememos/memos · GHSA-33m8-f4hw-wm3q

critical2022-12-27

CVE-2022-36437-Hazelcast connection caching

View chart →

hazelcast/hazelcast · GHSA-c5hg-mr8r-f6jp

high2022-12-27

CVE-2021-4286-cocagne pysrp vulnerable to side channel leaks

View chart →

cocagne/pysrp · GHSA-xmc3-9m9j-w9x4

medium2022-12-27

CVE-2019-25088-Oxidized Web vulnerable to Cross-site Scripting

View chart →

ytti/oxidized-web · GHSA-8qwh-rm6c-jv96

medium2022-12-27

CVE-2021-4287-binwalk vulnerable to UNIX Symbolic Link (Symlink) Following

View chart →

refirmlabs/binwalk · GHSA-8m3f-g62j-3vx8

high2022-12-27

CVE-2018-25049-email-existence Inefficient Regular Expression Complexity vulnerability

View chart →

nmanousos/email-existence · GHSA-p27h-4cpf-fw48

high2022-12-27

CVE-2015-10005-markdown-it vulnerable to Inefficient Regular Expression Complexity

View chart →

markdown-it/markdown-it · GHSA-j5p7-jf4q-742q

medium2022-12-26

CVE-2021-30134-php-mod/curl allows Cross-site Scripting

View chart →

php-mod/curl · GHSA-f8p3-q834-q9cj

critical2022-12-26

CVE-2022-4742-json-pointer vulnerable to Prototype Pollution

View chart →

manuelstofer/json-pointer · GHSA-6xrf-q977-5vgc

high2022-12-25

CVE-2021-4279-Starcounter-Jack JSON-Patch Prototype Pollution vulnerability

View chart →

starcounter-jack/json-patch · GHSA-8gh8-hqwg-xf34

critical2022-12-25

CVE-2020-36632-flat vulnerable to Prototype Pollution

View chart →

hughsk/flat · GHSA-2j2x-2gpw-g8fm

medium2022-12-25

CVE-2022-4741-docconv vulnerable to Memory Allocation with Excessive Size Value

View chart →

sajari/docconv · GHSA-qvx2-59g8-8hph

high2022-12-25

CVE-2021-4278-tree-kit vulnerable to Prototype Pollution

View chart →

cronvel/tree-kit · GHSA-mw4x-g2x8-qcvf

high2022-12-25

CVE-2020-36629-SimbCo httpster vulnerable to Path Traversal

View chart →

simbco/httpster · GHSA-p8j8-wxvp-h695

medium2022-12-25

CVE-2020-36627-Macaron i18n Open Redirect vulnerability

View chart →

go-macaron/i18n · GHSA-jwrv-x6rx-8vfm

medium2022-12-25

CVE-2022-44381-Snipe-IT allows attackers to check whether a user account exists

View chart →

snipe/snipe-it · GHSA-qqv9-gqh5-7h99

medium2022-12-25

CVE-2022-44380-Snipe-IT vulnerable to Cross Site Scripting for View Assigned Assets

View chart →

snipe/snipe-it · GHSA-363q-j92x-7543

high2022-12-25

CVE-2022-45197-Slixmpp lacks SSL Certificate hostname validation in XMLStream

View chart →

poezio/slixmpp · GHSA-q6cq-m9gm-6q2f