Security advisories

critical2022-07-09

CVE-2022-35411-rpc.py vulnerable to Deserialization of Untrusted Data

View chart →

abersheeran/rpc.py · GHSA-8rq8-f485-7v8x

high2022-07-08

CVE-2022-31121-Hyperledger Fabric vulnerable to Improper Input Validation in orderer/common/cluster consensus request

View chart →

hyperledger/fabric · GHSA-72x4-cq6r-jp4p

medium2022-07-08

CVE-2022-28889-Apache Druid before 0.23.0 vulnerable to clickjacking

View chart →

apache/druid · GHSA-pgq7-jcj5-xx6h

medium2022-07-08

CVE-2015-5298-Jenkins Google Login Plugin 1.0 and 1.1 allows anonymous users to authenticate through client-side request modification

View chart →

jenkinsci/google-login-plugin · GHSA-p487-39h9-hm84

medium2022-07-08

CVE-2021-44791-Apache Druid before 0.23.0 vulnerable to reflected XSS via unescaped URL parameters

View chart →

apache/druid · GHSA-8rmv-98m4-g5c6

medium2022-07-08

CVE-2022-32061-Snipe-IT 6.0.2 vulnerable to Cross-site Scripting

View chart →

snipe/snipe-it · GHSA-xwqx-x38c-cw95

medium2022-07-08

CVE-2022-32060-Snipe-IT 6.0.2 vulnerable to Cross-site Scripting via arbitrary file upload in Update Branding Settings

View chart →

snipe/snipe-it · GHSA-w82x-xjjr-cjr5

medium2022-07-08

CVE-2021-41042-XML External Entity Reference in Eclipse Lyo

View chart →

eclipse/lyo · GHSA-6296-mvgp-27hp

high2022-07-07

CVE-2022-2048-Jetty vulnerable to Invalid HTTP/2 requests that can lead to denial of service

View chart →

eclipse/jetty.project · GHSA-wgmr-mf83-7x4j

high2022-07-07

CVE-2022-2191-Jetty SslConnection does not release pooled ByteBuffers in case of errors

View chart →

eclipse/jetty.project · GHSA-8mpp-f3f7-xc28

low2022-07-07

CVE-2022-2047-Jetty invalid URI parsing may produce invalid HttpURI.authority

View chart →

eclipse/jetty.project · GHSA-cj7v-27pg-wf7q

critical2022-07-07

CVE-2022-33980-Code injection in Apache Commons Configuration

View chart →

apache/commons-configuration · GHSA-xj57-8qj4-c4m6

medium2022-07-07

CVE-2021-37839-Apache Superset allows authenticated users to access metadata they have no permission to

View chart →

apache/superset · GHSA-748r-5r8q-273m

medium2022-07-06

DOS and excessive memory usage when passing untrusted user input to to dag import

View chart →

ipfs/go-ipfs · GHSA-f2gr-7299-487h

high2022-07-06

CVE-2022-2097-AES OCB fails to encrypt some bytes

View chart →

alexcrichton/openssl-src-rs · GHSA-3wx7-46ch-7rq2

high2022-07-06

CVE-2022-31112-Protected fields exposed via LiveQuery

View chart →

parse-community/parse-server · GHSA-crrq-vr9j-fxxh

high2022-07-06

CVE-2022-31127-Improper handling of email input

View chart →

nextauthjs/next-auth · GHSA-pgjx-7f9g-9463

medium2022-07-06

Malformed CAR panics and excessive memory usage

View chart →

ipld/go-car · GHSA-9x4h-8wgm-8xfg

medium2022-07-06

CVE-2022-31124-Possible leak of key's raw field if declared length is incorrect

View chart →

scottcwang/openssh_key_parser · GHSA-hm37-9xh2-q499

high2022-07-06

CVE-2022-31129-Moment.js vulnerable to Inefficient Regular Expression Complexity

View chart →

moment/moment · GHSA-wc69-rhjr-hc9g