Security Advisories

high2022-09-21

autogluon.multimodal vulnerable to unsafe YAML deserialization

medium2022-09-21

CVE-2022-39239-@netlify/ipx vulnerable to Full Response SSRF and Stored XSS via Cache Poisoning and Improper Host Validation

View chart

netlify/netlify-ipx · GHSA-9jjv-524m-jm98

critical2022-09-21

CVE-2022-39227-python-jwt vulnerable to token forgery with new claims

View chart

davedoesdev/python-jwt · GHSA-5p8v-58qm-c7fp

low2022-09-21

CVE-2022-39231-parse-server auth adapter app ID validation can be circumvented

View chart

parse-community/parse-server · GHSA-r657-33vp-gp22

medium2022-09-21

CVE-2022-39230-fhir-works-on-aws-authz-smart handles permissions improperly

View chart

awslabs/fhir-works-on-aws-authz-smart · GHSA-vv7x-7w4m-q72f

medium2022-09-21

CVE-2022-39225-parse-server's session object properties can be updated by foreign user if object ID is known

View chart

parse-community/parse-server · GHSA-6w4q-23cf-j9jp

medium2022-09-21

Unbounded resource exhaustion in cmark-gfm autolink extension may lead to denial of service

View chart

gjtorikian/commonmarker · GHSA-4qw4-jpp4-8gvp

high2022-09-21

CVE-2022-39224-arr-pm vulnerable to arbitrary shell execution when extracting or listing files contained in a malicious rpm.

View chart

jordansissel/ruby-arr-pm · GHSA-88cv-mj24-8w3q

medium2022-09-21

CVE-2022-3102-jwcrypto token substitution can lead to authentication bypass

View chart

latchset/jwcrypto · GHSA-gwp4-mcv4-w95j

low2022-09-21

personnummer/rust vulnerable to Improper Input Validation

View chart

personnummer/rust · GHSA-28r9-pq4c-wp3c

medium2022-09-21

CVE-2022-3005-YetiForce CRM vulnerable to stored Cross-site Scripting via SlaPolicy module

View chart

yetiforcecompany/yetiforcecrm · GHSA-vx3x-hwph-grvw

medium2022-09-21

CVE-2022-3004-YetiForce CRM vulnerable to stored Cross-site Scripting via WorkFlow module

View chart

yetiforcecompany/yetiforcecrm · GHSA-qwc8-vjh3-gm2j

medium2022-09-21

CVE-2022-3000-YetiForce CRM vulnerable to stored Cross-site Scripting via LayoutEditor module

View chart

yetiforcecompany/yetiforcecrm · GHSA-mqh9-5jp9-6799

medium2022-09-21

CVE-2022-2924-YetiForce CRM vulnerable to stored Cross-site Scripting via WidgetsManagement module

View chart

yetiforcecompany/yetiforcecrm · GHSA-2qf8-h7pr-x2r8

medium2022-09-21

CVE-2022-3242-Microweber Cross-site Scripting can result in redirection to a malicious site

View chart

microweber/microweber · GHSA-232p-59mg-f98p

medium2022-09-21

CVE-2022-3245-Microweber vulnerable to HTML Injection in create tag functionality

View chart

microweber/microweber · GHSA-gm8c-w9cm-c445

high2022-09-21

CVE-2022-40955-Apache InLong vulnerable to Deserialization of Untrusted Data

View chart

apache/inlong · GHSA-26m4-qjp9-xmc6

medium2022-09-21

CVE-2022-32167-Cross site scripting in Cloudreve

View chart

cloudreve/cloudreve · GHSA-fg25-gq9g-32mx

critical2022-09-21

CVE-2022-38916-Pagekit vulnerable to Unrestricted Upload of File with Dangerous Type

View chart

pagekit/pagekit · GHSA-4v5m-vwvp-p7w8

critical2022-09-21

CVE-2022-37265-steal vulnerable to Prototype Pollution via alias variable

View chart

stealjs/steal · GHSA-wc4x-qmr2-rj8h