Security Advisories | GitStock

medium2022-12-14

CVE-2022-23526-Helm vulnerable to denial of service through schema file

helm/helm · GHSA-67fx-wx78-jx33

medium2022-12-14

CVE-2022-23525-Helm vulnerable to denial of service through through repository index file

helm/helm · GHSA-53c4-hhmh-vw5q

medium2022-12-14

CVE-2022-23524-Helm vulnerable to denial of service through string value parsing

helm/helm · GHSA-6rx9-889q-vv2r

medium2022-12-14

CVE-2022-23507-Tendermint light client verification not taking into account chain ID

informalsystems/tendermint-rs · GHSA-xqqc-c5gw-c5r5

high2022-12-14

CVE-2022-47410- "Newsletter subscriber management" (fp_newsletter) TYPO3 extension leaks subscriber data

bihor/fp_newsletter · GHSA-vxmc-qg5x-pvfx

high2022-12-14

CVE-2022-47411- "Newsletter subscriber management" (fp_newsletter) TYPO3 extension leaks subscriber data

bihor/fp_newsletter · GHSA-r44w-pfx8-28jv

critical2022-12-14

CVE-2022-47408-Multiple vulnerabilities in extension "Newsletter subscriber management" (fp_newsletter)

bihor/fp_newsletter · GHSA-f683-35w9-28g5

critical2022-12-14

CVE-2022-47406-TYPO3 vulnerable to Insufficient Session Expiration

typo3/typo3 · GHSA-53mm-hx32-6475

medium2022-12-14

CVE-2022-4495-collective.dms.basecontent Cross-site Scripting vulnerability

collective/collective.dms.basecontent · GHSA-r48c-4vfj-h426

critical2022-12-14

CVE-2022-4493-SCIFIO vulnerable to Path Traversal

scifio/scifio · GHSA-cmwm-45mj-mpg3

high2022-12-14

CVE-2022-34271-Apache Atlas: zip path traversal in import functionality

apache/atlas · GHSA-p782-4j23-xqcg

critical2022-12-14

CVE-2022-24377-cycle-import-check vulnerable to Command Injection

soontao/cycle-import-check · GHSA-995x-33wq-8gc9

medium2022-12-14

CVE-2022-43996-csaf-poc/csaf_distribution Cross-site Scripting vulnerability

csaf-poc/csaf_distribution · GHSA-xxfx-w2rw-gh63

critical2022-12-13

CVE-2022-3782-Keycloak vulnerable to path traversal via double URL encoding

keycloak/keycloak · GHSA-g8q8-fggx-9r3q

medium2022-12-13

CVE-2022-3916-Keycloak vulnerable to session takeover with OIDC offline refreshtokens

keycloak/keycloak · GHSA-97g8-xfvw-q4hg

high2022-12-13

CVE-2022-4223-pgadmin4 vulnerable to Code Injection

pgadmin-org/pgadmin4 · GHSA-3v6v-2x6p-32mc

high2022-12-13

CVE-2022-3996-Denial of service by double-checked locking in openssl-src

alexcrichton/openssl-src-rs · GHSA-vr8j-hgmm-jh9r

medium2022-12-13

CVE-2022-23520-Possible XSS vulnerability with certain configurations of rails-html-sanitizer

rails/rails-html-sanitizer · GHSA-rrfc-7g8p-99q8

medium2022-12-13

CVE-2022-23519-Possible XSS vulnerability with certain configurations of rails-html-sanitizer

rails/rails-html-sanitizer · GHSA-9h9g-93gc-623h

medium2022-12-13

CVE-2022-23518-Improper neutralization of data URIs may allow XSS in rails-html-sanitizer

rails/rails-html-sanitizer · GHSA-mcvf-2q2m-x72m