Security advisories

medium2022-12-07

CVE-2022-23471-containerd CRI stream server vulnerable to host memory exhaustion via terminal

View chart →

containerd/containerd · GHSA-2qjp-425j-52j9

high2022-12-07

CVE-2022-23492-libp2p DoS vulnerability from lack of resource management

View chart →

libp2p/go-libp2p · GHSA-j7qp-mfxf-8xjw

medium2022-12-07

CVE-2022-23491-Certifi removing TrustCor root certificate

View chart →

certifi/python-certifi · GHSA-43fp-rhv2-5gv8

high2022-12-07

CVE-2022-23486-libp2p DoS vulnerability from lack of resource management

View chart →

libp2p/rust-libp2p · GHSA-jvgw-gccv-q5p8

medium2022-12-07

CVE-2020-36565-Echo vulnerable to directory traversal

View chart →

labstack/echo · GHSA-j453-hm5x-c46w

critical2022-12-07

CVE-2022-46742-PaddlePaddle vulnerable to Code Injection

View chart →

paddlepaddle/paddle · GHSA-gcjf-29m9-888q

critical2022-12-07

CVE-2022-46741-PaddlePaddle Out-of-bounds Read vulnerability

View chart →

paddlepaddle/paddle · GHSA-2hvc-hwg3-hpvw

medium2022-12-07

CVE-2022-41994-baserCMS vulnerable to stored Cross-site Scripting

View chart →

baserproject/basercms · GHSA-vxwf-79ch-f7f7

medium2022-12-07

CVE-2022-42486-baserCMS vulnerable to stored Cross-site Scripting

View chart →

baserproject/basercms · GHSA-7w2v-35j3-xrm9

high2022-12-07

CVE-2022-44942-Casdoor arbitrary file deletion vulnerability via uploadFile function

View chart →

casdoor/casdoor · GHSA-f93f-55c2-8c89

high2022-12-06

CVE-2022-4147-Quarkus CORS filter allows simple GET and POST requests with an invalid Origin to proceed

View chart →

quarkusio/quarkus · GHSA-9895-g6x5-xwcp

critical2022-12-06

CVE-2022-44900-py7zr directory traversal vulnerability

View chart →

miurahr/py7zr · GHSA-m8xw-9x5x-6vh3

medium2022-12-06

DSInternals Credential Roaming Elevation of Privilege Vulnerability

View chart →

michaelgrafnetter/dsinternals · GHSA-vx2x-9cff-fhjw

high2022-12-06

CVE-2022-23472-Passeo uses insecure random number generator

View chart →

arjunsharda/passeo · GHSA-mhhf-vgwh-fw9h

high2022-12-06

CVE-2022-44289-Thinkphp has a code logic error

View chart →

top-think/framework · GHSA-59fh-rjq3-xq7j

low2022-12-06

CVE-2022-23466-teler dashboard vulnerable to DOM-based cross-site scripting (XSS)

View chart →

kitabisa/teler · GHSA-xr7p-8q82-878q

critical2022-12-06

CVE-2022-24439-GitPython vulnerable to Remote Code Execution due to improper user input validation

View chart →

gitpython-developers/gitpython · GHSA-hcpj-qp55-gfph

high2022-12-06

CVE-2022-25912-simple-git vulnerable to Remote Code Execution when enabling the ext transport protocol

View chart →

steveukx/git-js · GHSA-9p95-fxvg-qgq2

medium2022-12-06

CVE-2022-43556-Concrete CMS vulnerable to cross-site scripting in the text input field

View chart →

concretecms/concretecms · GHSA-xj33-8r43-r227

low2022-12-05

CVE-2022-23530-GuardDog vulnerable to arbitrary file write when scanning a specially-crafted remote PyPI package

View chart →

datadog/guarddog · GHSA-78m5-jpmf-ch7v