Security Advisories | GitStock

high2022-07-13

CVE-2022-2385-aws-iam-authenticator allow-listed IAM identity may be able to modify their username, escalate privileges before v0.5.9

kubernetes-sigs/aws-iam-authenticator · GHSA-pp3f-98qg-5g75

high2022-07-13

CVE-2022-1025-Argo CD improper access control bug can allow malicious user to escalate privileges to admin level

argoproj/argo-cd · GHSA-96jv-vj39-x4j6

medium2022-07-13

CVE-2022-33155-Cross site scripting in ameos_tarteaucitron

ameos/ameos_tarteaucitron · GHSA-4vr9-33fv-mg6r

medium2022-07-12

CVE-2022-31139-UnsafeAccessor 1.4.0 until 1.7.0 has no security checking for UnsafeAccess.getInstance()

karlatemp/unsafeaccessor · GHSA-cr6p-23cf-w9g9

high2022-07-12

CVE-2022-31140-Valinor error messages leading to potential data exfiltration before v0.12.0

cuyz/valinor · GHSA-5pgm-3j3g-2rc7

low2022-07-12

CVE-2022-31102-Argo CD SSO users vulnerable to Cross-site Scripting

argoproj/argo-cd · GHSA-pmjg-52h9-72qv

high2022-07-12

CVE-2022-31105-Argo CD certificate verification is skipped for connections to OIDC providers

argoproj/argo-cd · GHSA-7943-82jg-wmw5

critical2022-07-12

CVE-2022-32224-Active Record RCE bug with Serialized Columns

rails/rails · GHSA-3hhc-qp5v-9p2j

critical2022-07-12

CVE-2022-31558-Tooxie Shiva 0.10.0 allows absolute path traversal because Flask send_file function used unsafely

tooxie/shiva-server · GHSA-qp72-96p2-g644

critical2022-07-12

CVE-2022-31573-ChainerRL Visualizer 0.1.1 vulnerable to Path Traversal via unsafe use of send_file function

chainer/chainerrl-visualizer · GHSA-687h-86vc-5x59

critical2022-07-12

CVE-2022-31506-SatyaLab opendiamond 10.1.1 vulnerable to path traversal because Flask send_file function used unsafely

cmusatyalab/opendiamond · GHSA-x2pc-fqrw-hc7f

medium2022-07-12

CVE-2022-2368-Microweber before 1.2.21 allows attacker to bypass IP detection to brute-force password

microweber/microweber · GHSA-9wqr-9787-p4rf

medium2022-07-11

CVE-2022-31079-KubeEdge Cloud Stream and Edge Stream DoS from large stream message

kubeedge/kubeedge · GHSA-wrcr-x4qj-j543

medium2022-07-11

CVE-2022-31078-KubeEdge CloudCore Router memory exhaustion vulnerability

kubeedge/kubeedge · GHSA-qpx3-9565-5xwm

high2022-07-11

CVE-2022-27772-Temporary Directory Hijacking to Local Privilege Escalation Vulnerability in org.springframework.boot:spring-boot

spring-projects/spring-boot · GHSA-cm59-pr5q-cw85

medium2022-07-10

CVE-2022-2353-Microweber before v1.2.20 vulnerable to cross-site scripting

microweber/microweber · GHSA-gmh3-x5w7-jg5m

high2022-07-09

CVE-2022-33011-Known vulnerable to account takeover via host header injection attack in v1.3.1

idno/known · GHSA-p757-4v3p-j74f

medium2022-07-09

CVE-2022-31290-Known v1.3.1 Cross-site Scripting

idno/known · GHSA-g688-7j3c-h9f3

medium2022-07-09

CVE-2022-32115-Known vulnerable to code execution via SVG file in v1.3.1

idno/known · GHSA-5jgj-h9wp-53fr

medium2022-07-09

CVE-2022-30852-Known v1.3.1 contains Insecure Direct Object Reference

idno/known · GHSA-4v4p-87m3-5423