Security Advisories | GitStock

high2022-10-26

CVE-2022-43766-Apache IoTDB subject to ReDOS with Java 8

apache/iotdb · GHSA-g6hg-4v3c-6jq7

critical2022-10-26

CVE-2022-42468-Apache Flume vulnerable to remote code execution via deserialization of unsafe providerURL

apache/flume · GHSA-9w4g-fp9h-3q2v

high2022-10-26

CVE-2022-39944-Apache Linkis subject to Remote Code Execution via deserialization

apache/incubator-linkis · GHSA-3f3w-gmqf-4hj3

critical2022-10-26

CVE-2022-41711-Badaso vulnerable to Remote Code Execution via malicious file upload

uasoft-indonesia/badaso · GHSA-fwvc-9xhj-26v5

medium2022-10-26

CVE-2022-25849-HyperDown vulnerable to Cross-site Scripting

segmentfault/hyperdown · GHSA-4r9g-w48q-8jwm

critical2022-10-26

CVE-2022-2422-feathers-sequelize contains improper input validation leading to SQL injection

feathersjs-ecosystem/feathers-sequelize · GHSA-qpv8-4pjq-qqh7

critical2022-10-26

CVE-2022-2421-Insufficient validation when decoding a Socket.IO packet

socketio/socket.io-parser · GHSA-qm95-pgcg-qqfq

critical2022-10-26

CVE-2022-29823-Feather-Sequelize cleanQuery method vulnerable to Prototype Pollution

feathersjs-ecosystem/feathers-sequelize · GHSA-p5m3-27vh-52j4

critical2022-10-26

CVE-2022-29822-feathers-sequelize vulnerable to SQL injection due to improper parameter filtering

feathersjs-ecosystem/feathers-sequelize · GHSA-5hq7-j5wq-p227

high2022-10-25

CVE-2022-25918-Inefficient Regular Expression Complexity in shescape

ericcornelissen/shescape · GHSA-cr84-xvw4-qx3c

medium2022-10-25

CVE-2022-39354-Incorrect is_static parameter for custom stateful precompiles in SputnikVM (evm)

rust-blockchain/evm · GHSA-hhc4-47rh-cr34

critical2022-10-25

CVE-2022-39345-Gin-vue-admin subject to Remote Code Execution via file upload vulnerability

flipped-aurora/gin-vue-admin · GHSA-7gc4-r5jr-9hxv

critical2022-10-25

CVE-2022-38580-Skipper vulnerable to SSRF via X-Skipper-Proxy

zalando/skipper · GHSA-f2rj-m42r-6jm2

medium2022-10-25

matrix-sdk 0.6.0 logs access tokens

matrix-org/matrix-rust-sdk · GHSA-fc4h-xcf3-qj5f

medium2022-10-25

CVE-2022-39350-@dependencytrack/frontend vulnerable to Persistent Cross-Site-Scripting via Vulnerability Details

dependencytrack/frontend · GHSA-c33w-pm52-mqvf

medium2022-10-25

CVE-2022-39341-OpenFGA Authorization Bypass via tupleset wildcard

openfga/openfga · GHSA-vj4m-83m8-xpw5

medium2022-10-25

CVE-2022-39342-OpenFGA Authorization Bypass

openfga/openfga · GHSA-f4mm-2r69-mg5f

medium2022-10-25

CVE-2022-39340-OpenFGA subject to Information Disclosure via streamed-list-objects endpoint

openfga/openfga · GHSA-95x7-mh78-7w2r

high2022-10-25

CVE-2022-39327-Improper Control of Generation of Code ('Code Injection') in Azure CLI

azure/azure-cli · GHSA-47xc-9rr2-q7p4

high2022-10-25

CVE-2022-39321-Docker Command Escaping in the GitHub Actions Runner

actions/runner · GHSA-2c6m-6gqh-6qg3