Security Advisories | GitStock

low2022-10-03

SQLite3 addresses vulnerability in packaged version of libsqlite

sparklemotion/sqlite3-ruby · GHSA-mgvv-5mxp-xq67

critical2022-10-03

CVE-2022-39222-Dex vulnerable to Man-in-the-Middle allowing ID token capture via intercepted authorization code

dexidp/dex · GHSA-vh7g-p26c-j2cw

high2022-10-03

CVE-2022-42004-Uncontrolled Resource Consumption in FasterXML jackson-databind

fasterxml/jackson-databind · GHSA-rgv9-q543-rqg4

high2022-10-03

CVE-2022-42003-Uncontrolled Resource Consumption in Jackson-databind

fasterxml/jackson-databind · GHSA-jjjh-jjxp-wpff

high2022-10-01

CVE-2022-2529-Cloudflare GoFlow vulnerable to a Denial of Service in the sflow packet handling package

cloudflare/goflow · GHSA-9rpw-2h95-666c

medium2022-10-01

CVE-2022-2922-DNN vulnerable to Relative Path Traversal

dnnsoftware/dnn.platform · GHSA-9w72-2f23-57gm

high2022-10-01

CVE-2022-21222-css-what vulnerable to ReDoS due to use of insecure regular expression

fb55/css-what · GHSA-p28h-cc7q-c4fg

high2022-10-01

CVE-2022-24373-react-native-reanimated vulnerable to ReDoS

software-mansion/react-native-reanimated · GHSA-2j79-8pqc-r7x6

high2022-10-01

CVE-2022-3371-rdiffweb's lack of token name length limit can result in DoS or memory corruption

ikus060/rdiffweb · GHSA-3fhq-72hw-jqwv

critical2022-10-01

CVE-2022-40315-Moodle Minor SQL injection risk in admin user browsing

moodle/moodle · GHSA-mqw9-3cjm-xwp3

high2022-10-01

CVE-2022-40277-Joplin Remote Code Execution

laurent22/joplin · GHSA-mjr5-v9c9-mm7g

high2022-10-01

CVE-2022-40313-Moodle Stored Cross-site Scripting and page denial of service

moodle/moodle · GHSA-jqgr-gh62-jf53

medium2022-10-01

CVE-2022-40316-Moodle No groups filtering in H5P activity attempts report

moodle/moodle · GHSA-385f-vgq7-8hhx

critical2022-10-01

CVE-2022-40314-Moodle remote code execution

moodle/moodle · GHSA-2hmm-q272-xmhf

medium2022-10-01

CVE-2022-40923-LIEF vulnerable to denial of service through segmentation fault

lief-project/lief · GHSA-rm2x-hgr8-w343

critical2022-09-30

CVE-2022-39266-isolated-vm has vulnerable CachedDataOptions in API

laverdet/isolated-vm · GHSA-2jjq-x548-rhpv

high2022-09-30

CVE-2022-39254-When matrix-nio receives forwarded room keys, the receiver doesn't check if it requested the key from the forwarder

poljar/matrix-nio · GHSA-w4pr-4vjg-hffh

medium2022-09-30

CVE-2022-39252-matrix-sdk-crypto contains potential impersonation via room key forward responses

matrix-org/matrix-rust-sdk · GHSA-vp68-2wrm-69qm

high2022-09-30

CVE-2022-39250-matrix-js-sdk subject to user impersonation due to key/device identifier confusion in SAS verification

matrix-org/matrix-js-sdk · GHSA-5w8r-8pgj-5jmf

medium2022-09-30

CVE-2022-39263-Upstash Adapter missing token verification

nextauthjs/next-auth · GHSA-4rxr-27mm-mxq9