Security Advisories

high2022-07-15

CVE-2022-31158-LTI 1.3 Tool Library's Nonce Claim Value not validated against nonce value sent in Authentication Request before v5.0

View chart

packbackbooks/lti-1-3-php-library · GHSA-5p73-qg2v-383h

high2022-07-15

CVE-2022-31157-LTI 1.3 Tool Library's function used to generate random nonces not sufficiently cryptographically complex before v5.0

View chart

packbackbooks/lti-1-3-php-library · GHSA-768m-5w34-2xf5

high2022-07-15

CVE-2020-28191-Togglz console missing cross-site request forgery (CSRF) protection

View chart

togglz/togglz · GHSA-697v-pxg3-j262

high2022-07-15

CVE-2022-31159-Partial Path Traversal in com.amazonaws:aws-java-sdk-s3

View chart

aws/aws-sdk-java · GHSA-c28r-hw5m-5gv3

high2022-07-15

CVE-2020-10650-jackson-databind vulnerable to unsafe deserialization

View chart

fasterxml/jackson-databind · GHSA-rpr3-cw39-3pxh

medium2022-07-15

OroCommerce vulnerable to XSS when adding class name to Selector Manager on pages that use GrapeJS editor

View chart

oroinc/orocommerce · GHSA-6f85-3f8q-qc94

high2022-07-15

CVE-2022-31142-fastify-bearer-auth vulnerable to Timing Attack Vector

View chart

fastify/fastify-bearer-auth · GHSA-376v-xgjx-7mfr

medium2022-07-15

CVE-2022-31153-OpenZeppelin Contracts for Cairo account cannot process transactions on Goerli

View chart

openzeppelin/cairo-contracts · GHSA-8mjr-jr5h-q2xr

critical2022-07-15

CVE-2015-8031-Hudson XML API susceptible to External Entity Injection Vunerability prior to v3.3.2

View chart

hudson/hudson-2.x · GHSA-j3h2-8mf8-j5r2

medium2022-07-15

CVE-2022-31145-FlyteAdmin Insufficient AccessToken Expiration Check

View chart

flyteorg/flyteadmin · GHSA-qwrj-9hmp-gpxh

medium2022-07-15

CVE-2022-25303-Whoogle Search Cross-site Scripting via string parameter

View chart

benbusby/whoogle-search · GHSA-mxvc-fwgx-j778

medium2022-07-15

CVE-2021-4178-fabric8 kubernetes-client vulnerable

View chart

fabric8io/kubernetes-client · GHSA-98g7-rxmf-rrxm

medium2022-07-15

CVE-2022-2401-Mattermost users could access some sensitive information via API call

View chart

mattermost/mattermost-server · GHSA-7ggc-5r84-xf54

high2022-07-14

CVE-2019-10761-vm2 before 3.6.11 vulnerable to sandbox escape

View chart

patriksimek/vm2 · GHSA-wf5x-cr3r-xr77

high2022-07-14

CVE-2019-10800-Codecov does not sanitize gcov arguments

View chart

codecov/codecov-python · GHSA-h3qr-fjhm-jphw

medium2022-07-14

CVE-2022-32065-RuoYi 4.7.3 vulnerable to arbitrary file upload in background management module

View chart

yangzongzhuan/ruoyi · GHSA-6w2f-6wq3-rjvf

medium2022-07-14

CVE-2022-32114-Strapi 4.1.12 Cross-site Scripting via crafted file

View chart

strapi/strapi · GHSA-4vm8-j95f-j6v5

high2022-07-13

CVE-2022-24800-October CMS upload process vulnerable to RCE via Race Condition

View chart

octobercms/october · GHSA-8v7h-cpc2-r8jp

critical2022-07-13

CVE-2022-31507-Ganga allows absolute path traversal

View chart

ganga-devs/ganga · GHSA-7488-6x3r-23w5

medium2022-07-13

CVE-2022-25875-Svelte vulnerable to XSS when using objects during server-side rendering

View chart

sveltejs/svelte · GHSA-wv8q-r932-8hc7