Security Advisories | GitStock

medium2022-09-16

nftables binding to an already bound chain

siderolabs/talos · GHSA-jr8j-2jhp-m67v

high2022-09-16

Talos vulnerable dependency due to race condition in Linux kernel's IP framework XFRM

siderolabs/talos · GHSA-34vw-m4rh-r36p

low2022-09-16

Go-tuf Improperly handles multiple key IDs for the same public keys in attacker-controlled metadata

theupdateframework/go-tuf · GHSA-3633-5h82-39pq

medium2022-09-16

CVE-2022-36104-TYPO3 CMS vulnerable to Denial of Service in Page Error Handling

typo3/typo3 · GHSA-fffr-7x4x-f98q

medium2022-09-16

CVE-2022-36105-TYPO3 CMS vulnerable to User Enumeration via Response Timing

typo3/typo3 · GHSA-m392-235j-9r7r

medium2022-09-16

CVE-2022-36106-TYPO3 CMS missing check for expiration time of password reset token for backend users

typo3/typo3 · GHSA-5959-4x58-r8c2

medium2022-09-16

CVE-2022-36107-TYPO3 CMS Stored Cross-Site Scripting via FileDumpController

typo3/typo3 · GHSA-9c6w-55cp-5w25

medium2022-09-16

CVE-2022-36108-TYPO3 CMS vulnerable to Cross-Site Scripting in <f:asset.css> view helper

typo3/typo3 · GHSA-fv2m-9249-qx85

critical2022-09-16

typemap is Unmaintained

reem/rust-typemap · GHSA-vfv3-9w6v-23jp

critical2022-09-16

traitobject is Unmaintained

reem/rust-traitobject · GHSA-pp8r-vv2j-9j5v

low2022-09-16

CVE-2022-36113-Cargo extracting malicious crates can corrupt arbitrary files

rust-lang/cargo · GHSA-rfj2-q3h3-hm5j

medium2022-09-16

CVE-2022-36114-Cargo extracting malicious crates can fill the file system

rust-lang/cargo · GHSA-2hvr-h6gw-qrxp

critical2022-09-16

CVE-2022-36436-VNCAuthProxy authentication bypass vulnerability

osuosl/twisted_vncauthproxy · GHSA-237r-mx84-7x8c

high2022-09-16

CVE-2022-36092-XWiki Platform Old Core vulnerable to Authentication Bypass Using the Login Action

xwiki/xwiki-platform · GHSA-8h89-34w2-jpfm

high2022-09-16

CVE-2022-36093-XWiki Platform Web Templates vulnerable to Unauthorized User Registration Through the Distribution Wizard

xwiki/xwiki-platform · GHSA-h5j3-5x63-p8jv

high2022-09-16

CVE-2022-36094-XWiki Platform Web Parent POM vulnerable to XSS in the attachment history

xwiki/xwiki-platform · GHSA-mxf2-4r22-5hq9

critical2022-09-16

CVE-2022-37266-steal vulnerable to Prototype Pollution via key variable in babel.js

stealjs/steal · GHSA-vwhq-pm3r-fjm9

high2022-09-16

CVE-2022-3221-rdiffweb CSRF vulnerability in profile's SSH keys can lead to unauthorized access

ikus060/rdiffweb · GHSA-vq4h-xrwc-m639

critical2022-09-16

CVE-2022-38352-ThinkPHP deserialization vulnerability

top-think/framework · GHSA-qjjj-7g7h-54v3

medium2022-09-16

CVE-2022-3224-parse-url parses http URLs incorrectly, making it vulnerable to host name spoofing

ionicabizau/parse-url · GHSA-pqw5-jmp5-px4v