Security Advisories | GitStock

medium2022-09-29

CVE-2022-32170-Bytebase allows low-privilege users to view admin projects

bytebase/bytebase · GHSA-9mmc-27gw-w6mq

medium2022-09-29

CVE-2022-32169-Bytebase does not restrict low privilege user to access admin issues

bytebase/bytebase · GHSA-5rc4-v5mj-g8c4

critical2022-09-29

CVE-2022-40083-Labstack Echo Open Redirect vulnerability

labstack/echo · GHSA-crxj-hrmp-4rwf

high2022-09-29

CVE-2022-40082-Hertz contains path traversal via normalizePath function

cloudwego/hertz · GHSA-c9qr-f6c8-rgxf

low2022-09-29

CVE-2021-43980-Apache Tomcat Race Condition vulnerability

apache/tomcat · GHSA-jx7c-7mj5-9438

critical2022-09-29

CVE-2022-40929-XXL-JOB contains a Command execution vulnerability in background tasks

xuxueli/xxl-job · GHSA-m54f-rp6r-rrrm

medium2022-09-29

CVE-2022-3292-rdiffweb vulnerable to Use of Cache Containing Sensitive Information

ikus060/rdiffweb · GHSA-7fqm-jm52-f9vc

critical2022-09-28

CVE-2022-36067-vm2 vulnerable to Sandbox Escape resulting in Remote Code Execution on host

patriksimek/vm2 · GHSA-mrgp-mrhc-5jrq

medium2022-09-28

CVE-2022-38975-EC-CUBE DOM-based cross-site scripting vulnerability

ec-cube/ec-cube · GHSA-pggw-rqfm-72rh

high2022-09-28

CVE-2022-31367-Strapi mishandles hidden attributes within admin API responses

strapi/strapi · GHSA-4phg-hpqm-c3j4

low2022-09-28

CVE-2022-40199-EC-CUBE Directory traversal vulnerability

ec-cube/ec-cube · GHSA-wjpv-frf2-3r58

high2022-09-27

CVE-2022-39219-Brokercap Bifrost subject to authentication bypass when using HTTP basic authentication

brokercap/bifrost · GHSA-p6fh-xc6r-g5hw

high2022-09-27

CVE-2022-39280-ReDoS issue in dparse

pyupio/dparse · GHSA-8fg9-p83m-x5pq

medium2022-09-27

CVE-2022-3301-rdiffweb vulnerable to Improper Cleanup on Thrown Exception

ikus060/rdiffweb · GHSA-qq29-5vjh-vxwr

high2022-09-27

CVE-2022-3295-rdiffweb allows unlimited length of root directory name, which could result in DoS

ikus060/rdiffweb · GHSA-hrj7-f62f-j7x7

medium2022-09-27

CVE-2022-21169-express-xss-sanitizer vulnerable to Prototype Pollution via allowedTags attribute

ahmedadelfahim/express-xss-sanitizer · GHSA-grjp-4jmr-mjcw

critical2022-09-27

CVE-2022-21797-joblib vulnerable to arbitrary code execution

joblib/joblib · GHSA-6hrg-qmvc-2xh8

medium2022-09-27

CVE-2022-40044-Centreon contains cross-site scripting vulnerability via esc_name parameter

centreon/centreon · GHSA-rv5q-72p2-2q24

high2022-09-27

CVE-2022-40043-Centreon SQL Injection vulnerability via esc_name parameter

centreon/centreon · GHSA-25gv-wg6f-6frp

high2022-09-27

CVE-2022-3272-rdiffweb's unlimited length email field can lead to DoS

ikus060/rdiffweb · GHSA-qrj3-hrgj-fm7r