Security advisories

high2022-12-13

CVE-2022-23517-Inefficient Regular Expression Complexity in rails-html-sanitizer

View chart →

rails/rails-html-sanitizer · GHSA-5x79-w82f-gw8w

high2022-12-13

CVE-2022-23516-Uncontrolled Recursion in Loofah

View chart →

flavorjones/loofah · GHSA-3x8r-x6xp-q4vm

medium2022-12-13

CVE-2022-23515-Improper neutralization of data URIs may allow XSS in Loofah

View chart →

flavorjones/loofah · GHSA-228g-948r-83gx

high2022-12-13

CVE-2022-23514-Inefficient Regular Expression Complexity in Loofah

View chart →

flavorjones/loofah · GHSA-486f-hjj9-9vhh

medium2022-12-13

CVE-2022-23505-Authentication Bypass for passport-wsfed-saml2

View chart →

auth0/passport-wsfed-saml2 · GHSA-ppjq-qxhx-m25f

medium2022-12-13

CVE-2022-23504-TYPO3 CMS vulnerable to Sensitive Information Disclosure via YAML Placeholder Expressions in Site Configuration

View chart →

typo3/typo3 · GHSA-8w3p-qh3x-6gjr

high2022-12-13

CVE-2022-23503-TYPO3 CMS vulnerable to Arbitrary Code Execution via Form Framework

View chart →

typo3/typo3 · GHSA-c5wx-6c2c-f7rm

medium2022-12-13

CVE-2022-23502-TYPO3 CMS vulnerable to Insufficient Session Expiration after Password Reset

View chart →

typo3/typo3 · GHSA-mgj2-q8wp-29rr

medium2022-12-13

CVE-2022-23501-TYPO3 CMS vulnerable to Weak Authentication in Frontend Login

View chart →

typo3/typo3 · GHSA-jfp7-79g7-89rf

medium2022-12-13

CVE-2022-23500-TYPO3 CMS vulnerable to Denial of Service in Page Error Handling

View chart →

typo3/typo3 · GHSA-8c28-5mp7-v24h

medium2022-12-13

CVE-2022-23499-TYPO3 HTML Sanitizer vulnerable to Cross-Site Scripting

View chart →

typo3/html-sanitizer · GHSA-hvwx-qh2h-xcfj

high2022-12-13

CVE-2022-45693-Jettison Out-of-bounds Write vulnerability

View chart →

jettison-json/jettison · GHSA-grr4-wv38-f68w

high2022-12-13

CVE-2022-46363-Apache CXF vulnerable to Exposure of Sensitive Information

View chart →

apache/cxf · GHSA-3w37-5p3p-jv92

medium2022-12-13

CVE-2022-45690-hutool-json stack overflow vulnerability

View chart →

dromara/hutool · GHSA-whgh-g24c-3j5q

low2022-12-13

CVE-2022-45689-hutool-json vulnerable to memory exhaustion

View chart →

dromara/hutool · GHSA-fxrc-hg6j-6v3x

high2022-12-13

CVE-2022-45685-Jettison Out-of-bounds Write vulnerability

View chart →

jettison-json/jettison · GHSA-7rf3-mqpx-h7xg

low2022-12-12

CVE-2022-23523-linux-loader reading beyond EOF could lead to infinite loop

View chart →

rust-vmm/linux-loader · GHSA-52h2-m2cf-9jh6

medium2022-12-12

Candy Machine Set Collection During Mint Missing Check

View chart →

metaplex-foundation/metaplex-program-library · GHSA-9v25-r5q2-2p6w

high2022-12-12

Creator Verification Error when Bubblegum Activate

View chart →

metaplex-foundation/metaplex-program-library · GHSA-8r76-fr72-j32w

high2022-12-12

CVE-2022-23510-@cubejs-backend/api-gateway row level security bypass

View chart →

cube-js/cube.js · GHSA-6jqm-3c9g-pch7