Security advisories

medium2022-11-04

CVE-2022-3721-Froxlor vulnerable to Code Injection

View chart →

froxlor/froxlor · GHSA-h95w-p3x6-wwj6

medium2022-11-04

CVE-2021-39432-diplib Double Free

View chart →

diplib/diplib · GHSA-xf2w-5673-h6ww

critical2022-11-04

CVE-2022-39387-XWiki OIDC Authenticator vulnerable to bypassing OpenID login by providing a custom provider

View chart →

xwiki-contrib/oidc · GHSA-m7gv-v8xx-v47w

medium2022-11-04

CVE-2022-41710-Markdownify has Files or Directories Accessible to External Parties

View chart →

amitmerchant1990/electron-markdownify · GHSA-qqhf-xfhw-7884

medium2022-11-04

CVE-2022-42743-deep-parse-json vulnerable to Prototype Pollution

View chart →

sibu-github/deep-parse-json · GHSA-ff9j-pwxg-q5p2

medium2022-11-04

CVE-2022-41713-deep-object-diff vulnerable to Prototype Pollution

View chart →

mattphillips/deep-object-diff · GHSA-653v-rqx9-j85p

medium2022-11-03

CVE-2021-37823-OpenCart SQL injection vulnerability

View chart →

opencart/opencart · GHSA-236j-rfx5-wq38

critical2022-11-03

CVE-2022-39382-@keystone-6/core's NODE_ENV defaults to development with esbuild

View chart →

keystonejs/keystone · GHSA-25mx-2mxm-6343

medium2022-11-03

CVE-2022-44543-TYPO3 Extension femanager vulnerable to Broken Access Control

View chart →

in2code-de/femanager · GHSA-59m9-p6cm-94q5

medium2022-11-03

CVE-2020-36608-Tribal Systems Zenario CMS vulnerable to Cross-site Scripting

View chart →

tribalsystems/zenario · GHSA-f92p-f8r2-c87q

medium2022-11-02

CVE-2022-43982-Apache Airflow Cross-site Scripting vulnerability

View chart →

apache/airflow · GHSA-h63r-9xxf-f2c7

critical2022-11-02

CVE-2022-3827-Centreon vulnerable to SQL Injection

View chart →

centreon/centreon · GHSA-j5wx-jvw3-j363

medium2022-11-02

CVE-2022-43985-Apache Airflow Open Redirect vulnerability

View chart →

apache/airflow · GHSA-f9fq-78ch-4wmj

medium2022-11-02

CVE-2022-43670-Apache Sling App CMS vulnerable to Cross-site Scripting

View chart →

apache/sling-org-apache-sling-app-cms · GHSA-jj93-4jr5-x45h

medium2022-11-02

Batched HTTP requests may set incorrect `cache-control` response header

View chart →

apollographql/apollo-server · GHSA-8r69-3cvp-wxc3

low2022-11-02

CVE-2022-39379-fluentd vulnerable to remote code execution due to insecure deserialization (in non-default configuration)

View chart →

fluent/fluentd · GHSA-fppq-mj76-fpj2

high2022-11-02

ckb type_id script resume may randomly fail

View chart →

nervosnetwork/ckb · GHSA-mcmr-49x3-4jqm

critical2022-11-02

ckb: Transaction header_deps validation issue (network forking)

View chart →

nervosnetwork/ckb · GHSA-7fw6-6mfj-g3q2

medium2022-11-02

ckb: Large dep group requires a lot of resources to process but the cost to commit the transaction is very low.

View chart →

nervosnetwork/ckb · GHSA-9mfc-chwf-7whf

medium2022-11-02

Vulnerable OpenSSL included in cryptography wheels

View chart →

pyca/cryptography · GHSA-39hc-v87j-747x