Security advisories

critical2022-08-30

CVE-2022-36045-Cryptographically weak PRNG in `utils.generateUUID`

View chart →

nodebb/nodebb · GHSA-p4cc-w597-6cpm

low2022-08-30

Command Injection in moment-timezone

View chart →

moment/moment-timezone · GHSA-56x4-j7p9-fcf9

medium2022-08-30

Cleartext Transmission of Sensitive Information in moment-timezone

View chart →

moment/moment-timezone · GHSA-v78c-4p63-2j6c

medium2022-08-30

CVE-2022-36031-Directus vulnerable to unhandled exception on illegal filename_disk value

View chart →

directus/directus · GHSA-77qm-wvqq-fg79

medium2022-08-30

Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels

View chart →

cilium/cilium · GHSA-pfhr-pccp-hwmh

medium2022-08-30

iana-time-zone vulnerable to use after free in MacOS / iOS implementation

View chart →

strawlab/iana-time-zone · GHSA-3fg9-hcq5-vxrc

medium2022-08-30

CVE-2022-36009-gomatrixserverlib and Dendrite vulnerable to incorrect parsing of the event default power level in event auth

View chart →

matrix-org/gomatrixserverlib · GHSA-grvv-h2f9-7v9c

medium2022-08-30

mz-avro's incorrect use of `set_len` allows for un-initialized memory

View chart →

materializeinc/materialize · GHSA-jwh2-vrr9-vcp2

high2022-08-30

CVE-2022-29117- .NET Denial of Service Vulnerability

View chart →

dotnet/aspnetcore · GHSA-3rq8-h3gj-r5c6

medium2022-08-30

CVE-2022-3035-snipe-it vulnerable to cross-site scripting (XSS)

View chart →

snipe/snipe-it · GHSA-rff2-vqm3-jpv5

high2022-08-30

CVE-2020-26938-oauth2-server through 3.1.1 vulnerable to Open Redirect

View chart →

oauthjs/node-oauth2-server · GHSA-4rg6-fm25-gc34

critical2022-08-29

CVE-2022-25644-@pendo324/get-process-by-name are vulnerable to Arbitrary Code Execution

View chart →

pendo324/get-process-by-name-js · GHSA-qhxv-296x-hjv7

medium2022-08-29

CVE-2022-36573-Pagekit CMS cross-site scripting in Markdown text box where articles are edited

View chart →

pagekit/pagekit · GHSA-q6h8-qjjc-j8cg

critical2022-08-29

CVE-2022-25921-morgan-json vulnerable to Arbitrary Code Execution

View chart →

indexzero/morgan-json · GHSA-fwv4-6mxc-x5h3

critical2022-08-29

CVE-2022-21165-Font-Converter Vulnerable to Arbitrary Command Injection

View chart →

zgec/node-js-font-converter · GHSA-g2c3-vwff-m3xr

medium2022-08-29

CVE-2022-37059-Subrion CMS 4.2.1 vulnerable to cross-site scripting in admin panel

View chart →

intelliants/subrion · GHSA-rh4r-9689-6xw4

medium2022-08-29

CVE-2022-0718-python-oslo-utils has improper password parsing

View chart →

openstack/oslo.utils · GHSA-wmqq-r32m-87c5

medium2022-08-29

CVE-2022-36037-Cross-site scripting from dynamic options in the multiselect field

View chart →

getkirby/kirby · GHSA-3f89-869f-5w76

medium2022-08-29

CVE-2022-3017-Froxlor vulnerable to Cross-Site Request Forgery (CSRF)

View chart →

froxlor/froxlor · GHSA-9xgp-3mxp-rv7x

critical2022-08-28

CVE-2022-38792-exotel-py includes code execution backdoor inserted by a third party

View chart →

sarathsp06/exotel-py · GHSA-cv6j-9835-p7fh