Security Advisories

critical2022-07-26

CVE-2020-28438-deferred-exec Command Injection vulnerability

View chart

danheberden/deferred-exec · GHSA-54w4-2f2p-f48h

critical2022-07-26

CVE-2020-28443-sonar-wrapper Command Injection vulnerability

View chart

llooiicc/sonar-wrapper · GHSA-wr4v-3f2h-6hhh

critical2022-07-26

CVE-2020-28446-ntesseract vulnerable to Command Injection

View chart

taoyuan/ntesseract · GHSA-w868-4576-rv24

critical2022-07-26

CVE-2020-7678-node-import `params` argument can be controlled by users without any sanitization

View chart

mahdaen/node-import · GHSA-pc62-cq5x-3j5g

critical2022-07-26

CVE-2020-28461-js-ini Prorotype Pollution when malicious INI files submitted to an application that parses it with `parse`

View chart

sdju/js-ini · GHSA-m939-vrfp-9v8p

medium2022-07-26

CVE-2020-7649-snyk-broker Path Traversal before v4.73.0

View chart

snyk/broker · GHSA-gq75-5gc3-rfwg

critical2022-07-26

CVE-2020-28447-xopen is vulnerable to OS Command Injection in Exported Function xopen(filepath)

View chart

andrewimm/xopen · GHSA-74wf-cwjg-9cf2

critical2022-07-26

CVE-2021-23451-otp-generator before v3.0.0 insecurely generates random one-time passwords

View chart

maheshkumar-kakade/otp-generator · GHSA-6x93-h9g3-9phr

medium2022-07-26

CVE-2021-23397-@ianwalter/merge Prototype Pollution via `merge` function

View chart

ianwalter/merge · GHSA-42m6-g935-5vmq

medium2022-07-26

CVE-2022-35653-Moodle LTI module reflected XSS risk

View chart

moodle/moodle · GHSA-62wh-m4jr-233r

critical2022-07-26

CVE-2022-35649-Moodle PostScript Code Injection

View chart

moodle/moodle · GHSA-xp2f-9mx3-3c6p

medium2022-07-26

CVE-2022-35651-Moodle Stored XSS and blind SSRF possible via SCORM track details

View chart

moodle/moodle · GHSA-wwv7-h477-wrv7

high2022-07-26

CVE-2022-35650-Moodle Arbitrary file read when importing lesson questions

View chart

moodle/moodle · GHSA-pgm5-cr62-prxq

medium2022-07-26

CVE-2022-35652-Moodle Open redirect risk in mobile auto-login feature

View chart

moodle/moodle · GHSA-243v-5pff-qqfj

critical2022-07-26

CVE-2022-35131-Joplin is vulnerable to arbitrary code execution

View chart

laurent22/joplin · GHSA-ww2v-frv5-pj5x

high2022-07-26

CVE-2022-34749-Mistune vulnerable to catastrophic backtracking

View chart

lepture/mistune · GHSA-fw3v-x4f2-v673

high2022-07-25

CVE-2022-24294-Apache MXNet vulnerable to potential denial-of-service by excessive resource consumption

View chart

apache/mxnet · GHSA-xxj3-55p6-xg3h

medium2022-07-24

CVE-2018-25045-Django REST framework XSS Vulnerability

View chart

encode/django-rest-framework · GHSA-xqcf-hj92-967m

medium2022-07-23

CVE-2022-2495-Microweber Stored Cross-site Scripting before v1.2.20

View chart

microweber/microweber · GHSA-xg72-6c83-ghh4

medium2022-07-23

CVE-2022-2470-Microweber before 1.2.21 vulnerable to reflected XSS

View chart

microweber/microweber · GHSA-cfcg-2qgr-v243