Security Advisories | GitStock

medium2022-09-16

CVE-2022-36095-XWiki Cross-Site Request Forgery (CSRF) for actions on tags

xwiki/xwiki-platform · GHSA-fxwr-4vq9-9vhj

high2022-09-16

CVE-2022-35939-TensorFlow vulnerable to OOB write in `scatter_nd` in TF Lite

tensorflow/tensorflow · GHSA-ffjm-4qwc-7cmf

high2022-09-16

CVE-2022-35937-TensorFlow vulnerable to OOB read in `Gather_nd` in TF Lite

tensorflow/tensorflow · GHSA-pxrw-j2fv-hx3h

high2022-09-16

mozjpeg DecompressScanlines::read_scanlines is Unsound

imageoptim/mozjpeg-rust · GHSA-v8gq-5grq-9728

medium2022-09-16

CVE-2022-36101-Shopware contains sensitive data in backend customer module

shopware/shopware · GHSA-6vfq-jmxg-g58r

medium2022-09-16

CVE-2022-36087-OAuthLib vulnerable to DoS when attacker provides malicious IPV6 URI

oauthlib/oauthlib · GHSA-3pgj-pg6c-r5p7

medium2022-09-16

CVE-2022-36102-Shopware access control list bypassed via crafted specific URLs

shopware/shopware · GHSA-qc43-pgwq-3q2q

medium2022-09-16

CVE-2022-36109-Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions

moby/moby · GHSA-rc4r-wh2q-q6c4

high2022-09-16

CVE-2022-39213-Go-CVSS has Out-of-bounds Read vulnerability in ParseVector function

pandatix/go-cvss · GHSA-xhmf-mmv2-4hhx

medium2022-09-16

CVE-2022-35934-TensorFlow vulnerable to `CHECK` failure in tf.reshape via overflows

tensorflow/tensorflow · GHSA-f4w6-h4f5-wx45

medium2022-09-16

CVE-2022-35935-TensorFlow vulnerable to `CHECK` failure in `SobolSample` via missing validation

tensorflow/tensorflow · GHSA-97p7-w86h-vcf9

high2022-09-16

CVE-2022-31006-Hyperledger indy-node vulnerable to denial of service

hyperledger/indy-node · GHSA-x996-7qh9-7ff7

medium2022-09-16

CVE-2022-31667- Harbor fails to validate the user permissions when updating a robot account

goharbor/harbor · GHSA-xx9w-464f-7h6f

medium2022-09-16

CVE-2022-31669-Harbor fails to validate the user permissions when updating tag immutability policies

goharbor/harbor · GHSA-8c6p-v837-77f6

high2022-09-16

CVE-2022-31666-Harbor fails to validate the user permissions when viewing Webhook policies

goharbor/harbor · GHSA-jf8p-3vjh-pq94

high2022-09-16

CVE-2022-31670-Harbor fails to validate the user permissions when updating tag retention policies

goharbor/harbor · GHSA-3637-v6vq-xqqw

medium2022-09-16

CVE-2022-39215-Tauri's readDir Endpoint Scope can be Bypassed With Symbolic Links

tauri-apps/tauri · GHSA-28m8-9j7v-x499

high2022-09-16

CVE-2022-36069-Poetry Argument Injection can lead to Local Code Execution

python-poetry/poetry · GHSA-9xgj-fcgf-x6mw

medium2022-09-16

CVE-2022-35997-TensorFlow vulnerable to `CHECK` fail in `tf.sparse.cross`

tensorflow/tensorflow · GHSA-p7hr-f446-x6qf

medium2022-09-16

CVE-2022-35999-TensorFlow vulnerable to `CHECK` fail in `Conv2DBackpropInput`

tensorflow/tensorflow · GHSA-37jf-mjv6-xfqw