Security advisories

medium2022-08-18

CVE-2022-35954-@actions/core has Delimiter Injection Vulnerability in exportVariable

View chart →

actions/toolkit · GHSA-7r3h-m5j6-3q42

medium2022-08-18

oqs's Post-Quantum Key Encapsulation Mechanism SIKE broken

View chart →

open-quantum-safe/liboqs-rust · GHSA-hrjv-pf36-jpmr

high2022-08-18

CVE-2022-35961-OpenZeppelin Contracts vulnerable to ECDSA signature malleability

View chart →

openzeppelin/openzeppelin-contracts · GHSA-4h98-2769-gh6h

medium2022-08-18

CVE-2022-35949-`undici.request` vulnerable to SSRF using absolute URL on `pathname`

View chart →

nodejs/undici · GHSA-8qr4-xgw6-wmr3

medium2022-08-18

apollo-server-core vulnerable to URL-based XSS attack affecting IE11 on default landing page

View chart →

apollographql/apollo-server · GHSA-2fvv-qxrq-7jq6

high2022-08-18

CVE-2022-31198-OpenZeppelin Contracts's GovernorVotesQuorumFraction updates to quorum may affect past defeated proposals

View chart →

openzeppelin/openzeppelin-contracts · GHSA-xrc4-737v-9q75

high2022-08-18

CVE-2022-36024-Bots using py-cord as Discord API wrapper are vulnerable to shutdowns through remote code execution

View chart →

pycord-development/pycord · GHSA-qmhj-m29v-gvmr

medium2022-08-18

CVE-2022-2871-NotrinosERP Cross-site Scripting vulnerability

View chart →

notrinos/notrinoserp · GHSA-hrx5-cv4v-4c44

high2022-08-18

CVE-2022-38149-HashiCorp Consul Template could reveal Vault secret contents in error messages

View chart →

hashicorp/consul · GHSA-8449-7gc2-pwrp

high2022-08-17

CVE-2022-38216-Mapbox is vulnerable to Integer Overflow

View chart →

mapbox/mapbox-maps-android · GHSA-4696-g7jj-xg2h

high2022-08-17

CVE-2022-34255-Magento Improper Access Control vulnerability

View chart →

magento/magento2 · GHSA-x95x-f4g9-mm85

medium2022-08-17

CVE-2022-34257-Magento stored Cross-Site Scripting (XSS) vulnerability

View chart →

magento/magento2 · GHSA-rg7p-wmgj-f374

high2022-08-17

CVE-2022-34256-Magento Improper Authorization vulnerability

View chart →

magento/magento2 · GHSA-r7mm-grf3-5fjv

high2022-08-17

CVE-2022-34254-Magento Path Traversal vulnerability

View chart →

magento/magento2 · GHSA-fx9g-g9q6-x3jx

medium2022-08-17

CVE-2022-34259-Magento Improper Access Control vulnerability

View chart →

magento/magento2 · GHSA-9wjf-94h3-r4rh

medium2022-08-17

CVE-2022-34258-Magento stored Cross-Site Scripting (XSS) vulnerability

View chart →

magento/magento2 · GHSA-5m55-g8pv-x8ww

critical2022-08-17

CVE-2022-34253-Magento XML Injection vulnerability in the Widgets Module

View chart →

magento/magento2 · GHSA-cj7w-pm77-hvg6

high2022-08-17

CVE-2020-14321-Moodle Incorrect Authorization vulnerability

View chart →

moodle/moodle · GHSA-9q29-jcjw-fw7h

low2022-08-16

CVE-2022-2822-OctoPrint does not have rate limiting on the login page

View chart →

octoprint/octoprint · GHSA-5w5x-q9p5-9qg3

high2022-08-16

CVE-2022-2818-Cockpit Content Platform vulnerable to 2FA bypass

View chart →

cockpit-hq/cockpit · GHSA-8wj3-cpmr-8whp