Security Advisories | GitStock

high2022-09-27

CVE-2022-3290-rdiffweb's unlimited username field length can lead to DoS

ikus060/rdiffweb · GHSA-5v95-j4rr-6f3c

high2022-09-27

CVE-2022-3298-rdiffweb vulnerable to potential DoS via memory consumption

ikus060/rdiffweb · GHSA-xhw9-4wqq-x67v

high2022-09-26

CVE-2022-41343-Dompdf allows remote file inclusion because URI validation failure does not halt font registration

dompdf/dompdf · GHSA-6x28-7h8c-chx4

medium2022-09-25

CVE-2022-40716-HashiCorp Consul vulnerable to authorization bypass

hashicorp/consul · GHSA-m69r-9g56-7mv8

critical2022-09-25

CVE-2022-3269-rdiffweb vulnerable to account access via session fixation

ikus060/rdiffweb · GHSA-j3q4-gmj4-mj95

medium2022-09-25

CVE-2022-33681-Apache Pulsar Java Client vulnerable to Improper Certificate Validation

apache/pulsar · GHSA-c5fp-x2h5-vjv7

critical2022-09-25

CVE-2022-26112-Apache Pinot has Groovy Function support enabled by default

apache/pinot · GHSA-qj9p-jvmw-82rh

high2022-09-25

CVE-2022-35253-Hyperledger Fabric subject to Denial of Service via non-validated request

hyperledger/fabric · GHSA-9w7j-q3xw-p9vh

medium2022-09-25

CVE-2022-3257-Mattermost subject to Denial of Service via upload of special GIF

mattermost/mattermost-server · GHSA-m7w4-q5vg-5xfp

critical2022-09-25

CVE-2022-36944-Scala subject to file deletion, code execution due to Java deserialization chain with LazyList object deserialization

scala/scala · GHSA-8qv5-68g4-248j

medium2022-09-25

CVE-2022-24280-Proxy component of Apache Pulsar subject to abuse as Denial of Service endpoint

apache/pulsar · GHSA-3mg9-m3f6-v7fq

critical2022-09-25

CVE-2022-23463-Nepxion Discovery vulnerable to SpEL Injection leading to Remote Code Execution

nepxion/discovery · GHSA-q979-9m39-23mq

high2022-09-25

CVE-2022-41340-secp256k1-js implements ECDSA without required r and s validation, leading to signature forgery

lionello/secp256k1-js · GHSA-q3f4-9h4p-vgr3

high2022-09-25

CVE-2021-41803-HashiCorp Consul does not properly validate node or segment names prior to usage in JWT claim assertions

hashicorp/consul · GHSA-hr3v-8cp3-68rf

medium2022-09-25

CVE-2022-23464-Nepxion Discovery vulnerable to potential Information Disclosure due to Server-Side Request Forgery

nepxion/discovery · GHSA-hhxh-qphc-v423

medium2022-09-25

CVE-2022-23461-Jodit Editor vulnerable to Cross-site Scripting

xdan/jodit · GHSA-42hx-vrxx-5r6v

medium2022-09-23

CVE-2022-39242-Weight not properly refunded after EVM execution

paritytech/frontier · GHSA-v57h-6hmh-g2p4

high2022-09-23

Caddy-SSH vulnerable to Authorization Bypass due to incorrect usage of PAM library

mohammed90/caddy-ssh · GHSA-gmhj-xjfh-cf6m

high2022-09-23

CVE-2022-1941-protobuf-cpp and protobuf-python have potential Denial of Service issue

protocolbuffers/protobuf · GHSA-8gq9-2x98-w8hf

critical2022-09-23

CVE-2022-36025-Besu VM vulnerable to gas allocation error in CALL operations

hyperledger/besu · GHSA-4456-w38r-m53x