Security advisories

critical2022-11-10

eZ Platform users with the Company admin role can assign any role to any user

View chart →

ezsystems/repository-forms · GHSA-446q-xxg5-3vhh

critical2022-11-10

eZ Platform users with the Company admin role can assign any role to any user

View chart →

ezsystems/ezplatform-admin-ui · GHSA-pcpm-vc4v-cmvx

critical2022-11-10

Ibexa DXP users with the Company admin role can assign any role to any user

View chart →

ibexa/admin-ui · GHSA-g6jc-xrc3-4wwq

critical2022-11-10

Ibexa DXP users with the Company admin role can assign any role to any user

View chart →

ibexa/core · GHSA-394j-x37r-2q27

critical2022-11-10

ibexa/admin-ui vulnerable to Cross-site Scripting in content type name/shortname

View chart →

ibexa/admin-ui · GHSA-7644-cxp8-h23r

high2022-11-10

CVE-2022-41876-ezplatform-graphql GraphQL queries can expose password hashes

View chart →

ezsystems/ezplatform-graphql · GHSA-c7pc-pgf6-mfh5

critical2022-11-10

ezplatform-admin-ui vulnerable to Cross-Site Scripting (XSS)

View chart →

ezsystems/ezplatform-admin-ui · GHSA-58h5-h554-429q

critical2022-11-10

GraphQL queries can expose password hashes

View chart →

ibexa/graphql · GHSA-3p7g-wrgg-wq45

medium2022-11-10

CVE-2022-36022-Use of unclaimed s3 bucket in tests and examples

View chart →

deeplearning4j/deeplearning4j · GHSA-rc39-g977-687w

high2022-11-10

CVE-2022-39393-Wasmtime may have data leakage between instances in the pooling allocator

View chart →

bytecodealliance/wasmtime · GHSA-wh6w-3828-g9qf

medium2022-11-10

CVE-2022-39392-Wasmtime out of bounds read/write with zero-memory-pages configuration

View chart →

bytecodealliance/wasmtime · GHSA-44mr-8vmm-wjhg

medium2022-11-10

CVE-2021-40289-mm-wiki is vulnerable to Cross-Site Scripting (XSS)

View chart →

phachon/mm-wiki · GHSA-99g5-5643-xphp

medium2022-11-10

Read the Docs vulnerable to Cross-Site Scripting (XSS)

View chart →

readthedocs/readthedocs.org · GHSA-98pf-gfh3-x3mp

high2022-11-10

Redwood is vulnerable to account takeover via dbAuth "forgot-password"

View chart →

redwoodjs/redwood · GHSA-3qmc-2r76-4rqp

high2022-11-10

CVE-2022-41879-Parse Server is vulnerable to Prototype Pollution via Cloud Code Webhooks

View chart →

parse-community/parse-server · GHSA-93vw-8fm5-p2jf

medium2022-11-10

CVE-2022-36077-Exfiltration of hashed SMB credentials on Windows via file:// redirect

View chart →

electron/electron · GHSA-p2jh-44qj-pf2v

medium2022-11-10

CVE-2022-42964-pymatgen is vulnerable to Regular Expression Denial of Service (ReDoS)

View chart →

materialsproject/pymatgen · GHSA-5jqp-885w-xj32

medium2022-11-10

CVE-2022-42965-snowflake-connector-python is vulnerable to Regular Expression Denial of Service (ReDoS)

View chart →

snowflakedb/snowflake-connector-python · GHSA-4r6j-fwcx-94cf

medium2022-11-10

CVE-2022-42966-cleo is vulnerable to Regular Expression Denial of Service (ReDoS)

View chart →

python-poetry/cleo · GHSA-2p9h-ccw7-33gf

medium2022-11-10

CVE-2022-44244-Lin CMS vulnerable to Improper Authentication

View chart →

talelin/lin-cms-flask · GHSA-4vrc-q7m6-vq7w