Security Advisories | GitStock

high2022-07-06

CVE-2022-2306-Insufficient Session Expiration in Nakama

heroiclabs/nakama · GHSA-xv59-gc3r-rf92

medium2022-07-06

CVE-2022-2309-lxml NULL Pointer Dereference allows attackers to cause a denial of service

lxml/lxml · GHSA-wrxv-2j5q-m38w

high2022-07-06

CVE-2021-43116-Use of Hard-coded Credentials in Nacos

alibaba/nacos · GHSA-2g86-r6w2-wqqr

critical2022-07-06

CVE-2022-31836-Path Traversal in Beego

beego/beego · GHSA-95f9-94vc-665h

critical2022-07-06

CVE-2022-2321-Improper Restriction of Excessive Authentication Attempts

heroiclabs/nakama · GHSA-8r94-4h3c-939f

high2022-07-05

CVE-2022-31147-jquery-validation Regular Expression Denial of Service due to arbitrary input to url2 method

jquery-validation/jquery-validation · GHSA-ffmh-x56j-9rc3

medium2022-07-05

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in pycares

saghul/pycares · GHSA-c58j-88f5-h53f

high2022-07-05

CVE-2022-31116-Incorrect handling of invalid surrogate pair characters

ultrajson/ultrajson · GHSA-wpqr-jcpx-745r

medium2022-07-05

CVE-2022-31117-Potential double free of buffer during string decoding

ultrajson/ultrajson · GHSA-fm67-cv37-96ff

high2022-07-05

CVE-2022-31115-opensearch-ruby 2.x before 2.0.2 vulnerable to unsafe YAML deserialization

opensearch-project/opensearch-ruby · GHSA-977c-63xq-cgw3

medium2022-07-05

CVE-2022-31108-Possible inject arbitrary `CSS` into the generated graph affecting the container HTML

mermaid-js/mermaid · GHSA-x3vm-38hw-55wf

medium2022-07-05

CVE-2022-2300-Cross-site Scripting in microweber

microweber/microweber · GHSA-q6mp-562x-ggvv

critical2022-07-05

CVE-2022-34265-Django `Trunc()` and `Extract()` database functions vulnerable to SQL Injection

django/django · GHSA-p64x-8rxx-wf6q

medium2022-07-02

CVE-2022-2280-Cross-site Scripting in microweber

microweber/microweber · GHSA-5pg2-qg87-vmj7

medium2022-07-02

CVE-2022-25896-Passport vulnerable to session regeneration when a users logs in or out

jaredhanson/passport · GHSA-v923-w3x8-wh69

medium2022-07-02

CVE-2022-25876-Server-Side Request Forgery in link-preview-js

ospfranco/link-preview-js · GHSA-h9cw-7g8j-h66h

high2022-07-02

CVE-2022-25900-Command injection in git-clone

jaz303/git-clone · GHSA-8jmw-wjr8-2x66

high2022-07-02

CVE-2022-25758-Regular expression denial of service in scss-tokenizer

sasstools/scss-tokenizer · GHSA-7mwh-4pqv-wmr8

critical2022-07-02

CVE-2022-31943-Unrestricted Upload of File with Dangerous Type in MCMS

ming-soft/mcms · GHSA-4828-473v-37gh

critical2022-07-01

CVE-2021-40663-Prototype Pollution in deep.assign

janbialostok/deep-assign · GHSA-3829-mgmw-jcg4