Security advisories

medium2022-10-10

CVE-2022-3438-rdiffweb vulnerable to Open Redirect

View chart →

ikus060/rdiffweb · GHSA-8g9m-vv69-7j99

high2022-10-07

CVE-2022-39287-tiny-csrf has openly visible CSRF tokens

View chart →

valexandersaulys/tiny-csrf · GHSA-pj2c-h76w-vv6f

medium2022-10-07

CVE-2022-39281-Fat Free CRM vulnerable to Remote Denial of Service via Tasks endpoint

View chart →

fatfreecrm/fat_free_crm · GHSA-p75c-5x3h-cxcg

medium2022-10-07

CVE-2022-3423-NocoDB vulnerable to Denial of Service

View chart →

nocodb/nocodb · GHSA-grv6-m753-3w2g

high2022-10-07

CVE-2022-41672-Apache Airflow may allow authenticated users who have been deactivated to continue using the UI or API

View chart →

apache/airflow · GHSA-3q8r-f3pj-3gc4

medium2022-10-07

CVE-2022-41414-Liferay Portal Insecure Default Configuration in auth.login.prompt.enabled

View chart →

liferay/liferay-portal · GHSA-9427-7f65-88c8

high2022-10-07

CVE-2022-42092-Backdrop CMS Unrestricted File Upload vulnerability

View chart →

backdrop-ops/backdrop-composer · GHSA-33c9-rppf-m7fq

high2022-10-07

CVE-2022-35923-v8n vulnerable to Inefficient Regular Expression Complexity

View chart →

imbrn/v8n · GHSA-xrx9-gj26-5wx9

medium2022-10-07

Twisted vulnerable to HTTP Request Smuggling Attacks

View chart →

twisted/twisted · GHSA-8r99-h8j2-rw64

medium2022-10-07

CVE-2021-23385-Flask-Security vulnerable to Open Redirect

View chart →

mattupstate/flask-security · GHSA-cg8c-gc2j-2wf7

medium2022-10-07

Blst vulnerable to incorrect results for some inputs in blst_fp_eucl_inverse function

View chart →

supranational/blst · GHSA-x279-68rr-jp4p

medium2022-10-07

CVE-2021-21271-Tendermint Core vulnerable to Uncontrolled Resource Consumption

View chart →

tendermint/tendermint · GHSA-p658-8693-mhvg

high2022-10-07

CVE-2020-26269-TensorFlow vulnerable to heap out of bounds read in filesystem glob matching

View chart →

tensorflow/tensorflow · GHSA-9jjw-hf72-3mxw

critical2022-10-07

CVE-2020-14188-gajira-create GitHub action vulnerable to arbitrary code execution

View chart →

atlassian/gajira-create · GHSA-4xqx-pqpj-9fqw

high2022-10-07

CVE-2020-25614-xmlquery lacks check for whether LoadURL response is in XML format, causing denial of service

View chart →

antchfx/xmlquery · GHSA-93m7-c69f-5cfj

high2022-10-07

CVE-2020-7711-goxmldsig vulnerable to crash on nil-pointer dereference caused by sending malformed XML signatures

View chart →

russellhaering/goxmldsig · GHSA-mqqv-chpx-vq25

low2022-10-06

etcd having a negative value for cluster node size results in an index out-of-bound panic during service discovery

View chart →

etcd-io/etcd · GHSA-9gp7-6833-wv89

low2022-10-06

etcd user credentials are stored in WAL logs in plaintext

View chart →

etcd-io/etcd · GHSA-528j-9r78-wffx

medium2022-10-06

CVE-2020-15115-etcd has no minimum password length

View chart →

etcd-io/etcd · GHSA-4993-m7g5-r9hh

low2022-10-06

etcd vulnerable to TOCTOU of gateway endpoint authentication

View chart →

etcd-io/etcd · GHSA-h8g9-6gvh-5mrc