Security Advisories | GitStock

high2022-09-02

CVE-2022-31020-Indy's NODE_UPGRADE transaction vulnerable to remote code execution

hyperledger/indy-node · GHSA-r6v9-p59m-gj2p

critical2022-09-02

CVE-2022-2996-python-scciclient vulnerable to Man-in-the-middle (MITM) attacks

openstack-archive/python-scciclient · GHSA-rf3f-3p37-2qh4

medium2022-09-02

CVE-2022-2806-sosreport Exposure of Sensitive Information vulnerability

sosreport/sos · GHSA-7pf9-7cff-f854

high2022-09-01

CVE-2022-36058-elrond-go MultiESDTNFTTransfer call on a SC address with missing function name

elrondnetwork/elrond-go · GHSA-qf7j-25g9-r63f

medium2022-09-01

CVE-2022-31677-Pinniped Supervisor Insufficient Session Expiration vulnerability

vmware-tanzu/pinniped · GHSA-rp4v-hhm6-rcv9

high2022-09-01

CVE-2022-36035-Flux CLI Workload Injection

fluxcd/flux2 · GHSA-xwf3-6rgv-939r

medium2022-09-01

CVE-2022-36033-jsoup may not sanitize code injection XSS attempts if SafeList.preserveRelativeLinks is enabled

jhy/jsoup · GHSA-gp7f-rwcx-9369

critical2022-09-01

CVE-2022-2466-Quarkus does not terminate HTTP requests header context

quarkusio/quarkus · GHSA-mwhw-6p27-4crc

critical2022-08-31

CVE-2022-34668-NVFLARE unsafe deserialization due to Pickle

nvidia/nvflare · GHSA-6qv6-q77g-7qm6

low2022-08-31

CVE-2022-36036-Improper Control of Generation of Code ('Code Injection') in mdx-mermaid

sjwall/mdx-mermaid · GHSA-rvgm-35jw-q628

high2022-08-31

CVE-2022-36034-Polynomial regular expression used on uncontrolled data in nitrado.js

cainthebest/nitrado.js · GHSA-vqc4-v8hc-h2jg

medium2022-08-31

CVE-2022-35933-PrestaShop Product Comments Cross-site Scripting vulnerability

prestashop/productcomments · GHSA-prrh-qvhf-x788

high2022-08-31

CVE-2022-31152-Denial of service due to incorrect application of event authorization rules

matrix-org/synapse · GHSA-jhjh-776m-4765

medium2022-08-31

CVE-2022-25646-x-data-spreadsheet through 1.1.9 vulnerable to Cross-site Scripting

myliang/x-spreadsheet · GHSA-x5cw-843f-r366

high2022-08-31

CVE-2022-25857-Uncontrolled Resource Consumption in snakeyaml

snakeyaml/snakeyaml · GHSA-3mc7-4q67-w48m

medium2022-08-31

CVE-2022-36745-LibreNMS vulnerable to Cross-Site Scripting (XSS)

librenms/librenms · GHSA-5229-94p3-7wwq

medium2022-08-31

CVE-2022-36746-LibreNMS vulnerable to Cross-Site Scripting (XSS)

librenms/librenms · GHSA-325v-g5vx-whxc

medium2022-08-30

Captcha Bypass in strapi-plugin-ezforms

excl-networks/strapi-plugin-ezforms · GHSA-8mgq-6r2q-82w9

high2022-08-30

Cross-site scripting from content entered in the tags and multiselect fields

getkirby/kirby · GHSA-rv3r-vqjj-8c76

medium2022-08-30

CVE-2022-36055-Helm Vulnerable to denial of service through string value parsing

helm/helm · GHSA-7hfp-qfw3-5jxh