Security advisories

critical2022-12-01

CVE-2022-44262-ff4j is vulnerable to Remote Code Execution (RCE)

View chart →

ff4j/ff4j · GHSA-65hj-9ppw-77xc

medium2022-12-01

CVE-2022-40849-ThinkCMF Stored Cross-Site Scripting (XSS)

View chart →

thinkcmf/thinkcmf · GHSA-m9mf-rqx6-2xpc

medium2022-11-30

CVE-2022-41965-Authenticated OpenRedirect Vulnerability

View chart →

opencast/opencast · GHSA-r3qr-vwvg-43f7

high2022-11-30

CVE-2022-45442-Sinatra vulnerable to Reflected File Download attack

View chart →

sinatra/sinatra · GHSA-2x8x-jmrp-phxw

critical2022-11-30

CVE-2022-44136-Zenario CMS is vulnerable to Remote Code Execution (RCE).

View chart →

tribalsystems/zenario · GHSA-4p38-rc98-cr39

medium2022-11-30

CVE-2022-4231-Tribal Systems Zenario CMS vulnerable to Session Fixation

View chart →

tribalsystems/zenario · GHSA-6657-9743-4mc6

critical2022-11-29

CVE-2022-41912-crewjam/saml vulnerable to signature bypass via multiple Assertion elements due to improper authentication

View chart →

crewjam/saml · GHSA-j2jp-wvqg-wc2g

medium2022-11-29

Stored Cross-Site Scripting (XSS) in Keycloak via groups dropdown

View chart →

keycloak/keycloak · GHSA-755v-r4x4-qf7m

critical2022-11-29

CVE-2022-3751-owncast is vulnerable to SQL Injection

View chart →

owncast/owncast · GHSA-cvh4-cjc9-84qm

high2022-11-29

CVE-2022-21126-HTSJDK is vulnerable to exposure of resource(s) to the wrong sphere

View chart →

samtools/htsjdk · GHSA-96vh-4rfp-c42c

high2022-11-29

CVE-2022-25848-static-dev-server vulnerable to path traversal

View chart →

etoah/static-dev-server · GHSA-7fxm-c848-89q8

low2022-11-28

Package discontinued because Bitly lowered the free quota

View chart →

impredicative/bitlyshortener · GHSA-ggrh-grj3-vfvw

medium2022-11-28

CVE-2022-39325-baserproject/basercms vulnerable to cross-site scripting (XSS) vulnerability

View chart →

baserproject/basercms · GHSA-395x-wv32-44v5

low2022-11-28

CVE-2022-41954-Temporary File Information Disclosure vulnerability in MPXJ

View chart →

joniles/mpxj · GHSA-jf2p-4gqj-849g

high2022-11-28

code injection in phpxmlrpc/phpxmlrpc

View chart →

gggeek/phpxmlrpc · GHSA-3fgr-xjr6-xqm8

high2022-11-28

CVE-2022-41654-ghost vulnerable to unauthorized newsletter modification via improper access controls

View chart →

tryghost/ghost · GHSA-9gh8-wp53-ccc6

high2022-11-28

CVE-2022-45921-FusionAuth vulnerable to directory traversal attack

View chart →

fusionauth/fusionauth-java-client · GHSA-rmcx-fg5w-x8j9

high2022-11-28

CVE-2022-38900-decode-uri-component vulnerable to Denial of Service (DoS)

View chart →

samverschueren/decode-uri-component · GHSA-w573-4hg7-7wgq

critical2022-11-27

CVE-2022-45933-KubeView vulnerable to full cluster takeover due to improper authentication

View chart →

benc-uk/kubeview · GHSA-22vc-5pgw-644q

high2022-11-27

CVE-2022-24999-qs vulnerable to Prototype Pollution

View chart →

ljharb/qs · GHSA-hrpp-h998-j3pp