Security Advisories | GitStock

medium2022-12-23

CVE-2022-4692-usememos/memos vulnerable to stored Cross-site Scripting

usememos/memos · GHSA-f552-97qx-c694

critical2022-12-23

CVE-2022-47945-ThinkPHP Framework vulnerable to remote code execution

top-think/framework · GHSA-p4qr-vq2g-22wp

high2022-12-23

CVE-2022-4689-usememos/memos vulnerable to account takeover due to improper access control

usememos/memos · GHSA-w57v-6xp4-rm2v

high2022-12-23

CVE-2022-4688-usememos/memos vulnerable to improper authorization

usememos/memos · GHSA-vwg4-846x-f94v

high2022-12-23

CVE-2022-4684-usememos/memos Improper Access Control vulnerability

usememos/memos · GHSA-qr52-59r6-49f4

medium2022-12-23

CVE-2022-4683-usememos/memos missing Secure cookie attribute

usememos/memos · GHSA-qcw2-492v-57xj

high2022-12-23

CVE-2022-4687-usememos/memos makes Incorrect Use of Privileged APIs

usememos/memos · GHSA-fv6c-rfg3-gvjw

medium2022-12-23

CVE-2022-4690-usememos/memos vulnerable to stored cross-site scripting (XSS)

usememos/memos · GHSA-c8jh-vcjh-fx2w

medium2022-12-23

CVE-2022-4685-usememos/memos vulnerable to improper access control

usememos/memos · GHSA-9v48-2h5x-fvpm

critical2022-12-23

CVE-2022-4686-usememos/memos Authorization Bypass Through User-Controlled Key vulnerability

usememos/memos · GHSA-68gw-r2x5-7r5r

high2022-12-23

CVE-2022-40899-Python Charmers Future denial of service vulnerability

pythoncharmers/python-future · GHSA-v3c5-jqr6-7qm8

high2022-12-23

CVE-2022-40897-pypa/setuptools vulnerable to Regular Expression Denial of Service (ReDoS)

pypa/setuptools · GHSA-r9hx-vwmv-q579

high2022-12-23

CVE-2022-40898-pypa/wheel vulnerable to Regular Expression denial of service (ReDoS)

pypa/wheel · GHSA-qwmp-2cf2-g9g6

critical2022-12-23

CVE-2022-47931-Collision of hash values in github.com/bnb-chain/tss-lib

bnb-chain/tss-lib · GHSA-cvcx-g7wh-x8rf

medium2022-12-22

CVE-2022-46171-Tauri Filesystem Scope Glob Pattern is too Permissive

tauri-apps/tauri · GHSA-6mv3-wm7j-h4w5

high2022-12-22

CVE-2022-46170-CodeIgniter4 Potential Session Handlers Vulnerability

codeigniter4/codeigniter4 · GHSA-6cq5-8cj7-g558

high2022-12-22

CVE-2022-23556-CodeIgniter4 allows spoofing of IP address when using proxy

codeigniter4/codeigniter4 · GHSA-ghw3-5qvm-3mqc

high2022-12-22

CVE-2020-36625-destiny.gg chat vulnerable to cross-site request forgery

destinygg/chat · GHSA-cjcc-46j8-xmr8

medium2022-12-22

CVE-2020-36624-text_helpers uses web link to untrusted target with window.opener access

ahorner/text-helpers · GHSA-74hc-57m5-83ch

critical2022-12-22

CVE-2022-45347-Apache ShardingSphere-Proxy Incomplete Cleanup vulnerability

pjfanning/shardingsphere · GHSA-wmxm-6wxc-3xqf