Security advisories

high2022-09-21

CVE-2022-37259-steal Inefficient Regular Expression Complexity vulnerability via string variable

View chart →

stealjs/steal · GHSA-rgqx-226f-2xp4

high2022-09-21

CVE-2022-39974-WASM3 Improper Input Validation vulnerability

View chart →

wasm3/wasm3 · GHSA-crf8-h2wq-2h9x

medium2022-09-20

CVE-2022-39220-SFTPGo WebClient vulnerable to Cross-site Scripting

View chart →

drakkan/sftpgo · GHSA-cf7g-cm7q-rq7f

high2022-09-20

CVE-2022-31166-XWiki.WebHome vulnerable to Improper Privilege Management in XWiki resolving groups

View chart →

xwiki/xwiki-platform · GHSA-g4h6-qp44-wqvx

high2022-09-20

CVE-2022-31167-XWiki Platform Security Parent POM vulnerable to overwriting of security rules of a page with a final page having the same reference

View chart →

xwiki/xwiki-platform · GHSA-gg53-wf5x-r3r6

high2022-09-20

CVE-2022-39218-Fastly Compute@Edge JS Runtime has fixed random number seed during compilation

View chart →

fastly/js-compute-runtime · GHSA-cmr8-5w4c-44v8

high2022-09-20

CVE-2022-2995-CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure

View chart →

cri-o/cri-o · GHSA-phjr-8j92-w5v7

critical2022-09-20

CVE-2022-38545-Valine code injection vulnerability

View chart →

xcss/valine · GHSA-mcvg-g9wx-v5vx

low2022-09-19

CVE-2023-22963-personnummer/dart vulnerable to Improper Input Validation

View chart →

personnummer/dart · GHSA-4xh4-v2pq-jvhm

medium2022-09-19

CVE-2022-25873-Vuetify Cross-site Scripting vulnerability

View chart →

vuetifyjs/vuetify · GHSA-q4q5-c5cv-2p68

medium2022-09-18

CVE-2022-3173-Snipe-IT vulnerable to Improper Authentication

View chart →

snipe/snipe-it · GHSA-fhvv-p968-6vvj

medium2022-09-18

CVE-2022-3232-rdiffweb CSRF vulnerability in admin area can lead to deletion of repositories and users

View chart →

ikus060/rdiffweb · GHSA-cw2v-wv4g-w4p6

medium2022-09-18

CVE-2022-3231-LibreNMS stored Cross-site Scripting via Schedule Maintenance `Title` parameter

View chart →

librenms/librenms · GHSA-3jh2-wmv7-m932

high2022-09-17

CVE-2022-40150-Jettison memory exhaustion

View chart →

jettison-json/jettison · GHSA-x27m-9w8j-5vcw

medium2022-09-17

CVE-2022-40149-Jettison parser crash by stackoverflow

View chart →

jettison-json/jettison · GHSA-56h3-78gp-v83r

medium2022-09-17

CVE-2022-40152-Denial of Service due to parser crash

View chart →

fasterxml/woodstox · GHSA-3f7h-mf4q-vrm4

medium2022-09-17

CVE-2022-37248-Craft CMS Cross site Scripting vulnerability

View chart →

craftcms/cms · GHSA-wxvf-839f-jqmh

medium2022-09-17

CVE-2022-37250-Craft CMS Stored Cross-site Scripting in User Addresses Title

View chart →

craftcms/cms · GHSA-8r89-x93x-mjq2

medium2022-09-17

CVE-2022-3225-Budibase Improper Control of Dynamically-Managed Code Resources vulnerability

View chart →

budibase/budibase · GHSA-x92g-49gh-63qm

medium2022-09-17

CVE-2022-37251-Craft CMS vulnerable to Cross-site Scripting via entry revisions and drafts

View chart →

craftcms/cms · GHSA-mw37-wx8p-gp45