Security advisories

high2022-10-12

CVE-2022-37599-loader-utils is vulnerable to Regular Expression Denial of Service (ReDoS)

View chart →

webpack/loader-utils · GHSA-hhq3-ff78-jv3g

medium2022-10-12

CVE-2022-41606-Nomad Panics On Job Submission With Bad Artifact Stanza Source URL

View chart →

hashicorp/nomad · GHSA-7v3g-4878-5qrf

medium2022-10-12

CVE-2022-40440-mxGraph vulnerable to cross-site scripting in setTooltips function

View chart →

jgraph/mxgraph · GHSA-j4rv-pr9g-q8jv

critical2022-10-12

CVE-2022-37611-tschaub gh-pages vulnerable to prototype pollution

View chart →

tschaub/gh-pages · GHSA-8mmm-9v2q-x3f9

critical2022-10-12

CVE-2022-37617-thlorenz browserify-shim vulnerable to prototype pollution

View chart →

thlorenz/browserify-shim · GHSA-866w-wm4h-95c6

critical2022-10-12

CVE-2022-40664-Apache Shiro Authentication Bypass vulnerability

View chart →

apache/shiro · GHSA-45x9-q6vj-cqgq

high2022-10-11

CVE-2022-41032-NuGet Elevation of Privilege Vulnerability

View chart →

nuget/nuget.client · GHSA-g3q9-xf95-8hp5

high2022-10-11

CVE-2022-39296-melisplatform/melis-asset-manager vulnerable to Path Traversal

View chart →

melisplatform/melis-asset-manager · GHSA-7fj2-rrq6-rphq

high2022-10-11

CVE-2022-39297-melisplatform/melis-cms vulnerable to deserialization of untrusted data

View chart →

melisplatform/melis-cms · GHSA-m3m3-6gww-7gj9

high2022-10-11

CVE-2022-39298-melisplatform/melis-front vulnerable to deserialization of untrusted data

View chart →

melisplatform/melis-front · GHSA-h479-2mv4-5c26

high2022-10-11

CVE-2022-36070-Poetry vulnerable to Untrusted Search Path leading to Local Code Execution on Windows

View chart →

python-poetry/poetry · GHSA-j4j9-7hg9-97g6

high2022-10-11

CVE-2022-42731-django-mfa2 vulnerable to MFA Replay attack

View chart →

mkalioby/django-mfa2 · GHSA-vw39-2wj9-4q86

medium2022-10-11

CVE-2022-32175-AdGuardHome vulnerable to Cross-Site Request Forgery

View chart →

adguardteam/adguardhome · GHSA-mwwc-3jv2-62j3

critical2022-10-11

CVE-2022-32174-Gogs vulnerable to Cross-site Scripting

View chart →

gogs/gogs · GHSA-mcjj-2fvq-mc3r

high2022-10-11

CVE-2022-3358-Using a Custom Cipher with `NID_undef` may lead to NULL encryption

View chart →

alexcrichton/openssl-src-rs · GHSA-4f63-89w9-3jjv

medium2022-10-11

CVE-2022-41376-Cross site scripting in Metro UI

View chart →

olton/metro-ui-css · GHSA-633r-r4p8-pw3w

high2022-10-11

CVE-2022-39288-fastify vulnerable to denial of service via malicious Content-Type

View chart →

fastify/fastify · GHSA-455w-c45v-86rg

high2022-10-10

CVE-2022-39271-Traefik HTTP/2 connections management could cause a denial of service

View chart →

traefik/traefik · GHSA-c6hx-pjc3-7fqr

high2022-10-10

CVE-2022-39292-Exposure of sensitive Slack webhook URLs in debug logs and traces

View chart →

abdolence/slack-morphism-rust · GHSA-4mjx-2gh5-ph8h

low2022-10-10

Incorrect default cookie name and recommendation

View chart →

psifi-solutions/csrf-csrf · GHSA-jjmg-x456-w976