Security Advisories

medium2022-12-22

CVE-2022-25948-liquidjs may leak properties of a prototype

medium2022-12-22

CVE-2022-23541-jsonwebtoken's insecure implementation of key retrieval function could lead to Forgeable Public/Private Tokens from RSA to HMAC

View chart

auth0/node-jsonwebtoken · GHSA-hjrf-2m68-5959

medium2022-12-22

CVE-2022-23540-jsonwebtoken vulnerable to signature validation bypass due to insecure default algorithm in jwt.verify()

View chart

auth0/node-jsonwebtoken · GHSA-qwph-4952-7xr6

high2022-12-22

CVE-2022-23539-jsonwebtoken unrestricted key type could lead to legacy keys usage

View chart

auth0/node-jsonwebtoken · GHSA-8cf7-32gw-wr33

medium2022-12-22

CVE-2022-4644-rdiffweb Open Redirect vulnerability

View chart

ikus060/rdiffweb · GHSA-639f-hxcv-84mc

medium2022-12-22

CVE-2022-4647-Microweber vulnerable to Stored Cross-Site Scripting

View chart

microweber/microweber · GHSA-9cmm-52cv-6hvc

high2022-12-22

CVE-2022-4646-rdiffweb vulnerable to Cross-Site Request Forgery

View chart

ikus060/rdiffweb · GHSA-85fp-523q-5xwc

critical2022-12-22

CVE-2022-4643-docconv OS Command Injection vulnerability

View chart

sajari/docconv · GHSA-6m4h-hfpp-x8cx

medium2022-12-22

CVE-2022-4638-collective.contact.widget is vulnerable to cross-site scripting

View chart

collective/collective.contact.widget · GHSA-5pqf-rvm7-3wgw

low2022-12-21

CVE-2020-36620-EnumStringValues vulnerable to Uncontrolled Resource Consumption

View chart

brondahl/enumstringvalues · GHSA-vq23-hwg7-hxrh

medium2022-12-21

CVE-2021-4272-studygolang vulnerable to cross-site scripting

View chart

studygolang/studygolang · GHSA-gw62-c7w4-x449

high2022-12-21

CVE-2021-4264-dustjs-linkedin vulnerable to Prototype Pollution

View chart

linkedin/dustjs · GHSA-c6rp-wrp9-qr4q

medium2022-12-21

CVE-2021-4263-leanote vulnerable to cross-site scripting

View chart

leanote/leanote · GHSA-6cmv-2548-82v4

medium2022-12-21

CVE-2022-23551-AAD Pod Identity obtaining token with backslash

View chart

azure/aad-pod-identity · GHSA-p82q-rxpm-hjpc

critical2022-12-21

CVE-2022-40145-Apache Karaf vulnerable to potential code injection

View chart

apache/karaf · GHSA-c2p4-8mvv-rwmv

high2022-12-21

CVE-2022-47633-kyverno verifyImages rule bypass possible with malicious proxy/registry

View chart

kyverno/kyverno · GHSA-m3cq-xcx9-3gvm

high2022-12-21

CVE-2022-38060-OpenStack Kolla sudo privilege escalation vulnerability

View chart

openstack/kolla · GHSA-rvxr-pf5f-j2qj

high2022-12-21

CVE-2022-25895-lite-dev-server vulnerable to Directory Traversal

View chart

shadowwzw/lite-dev-server · GHSA-pppv-ch8p-rp2w

medium2022-12-21

CVE-2022-25929-Smoothie vulnerable to Cross-site Scripting when tooltipLabel or strokeStyle are controlled by users

View chart

joewalnes/smoothie · GHSA-g662-qq45-ppwm

critical2022-12-21

CVE-2022-25893-vm2 vulnerable to Arbitrary Code Execution

View chart

patriksimek/vm2 · GHSA-4w2j-2rg4-5mjw