Security advisories

high2022-07-01

CVE-2022-34788-Jenkins Matrix Reloaded Plugin vulnerable to Stored XSS

View chart →

jenkinsci/matrix-reloaded-plugin · GHSA-2463-7265-h8r4

critical2022-07-01

CVE-2014-0156-OS Command Injection in awesome spawn

View chart →

manageiq/awesome_spawn · GHSA-qpqw-mc85-qvm9

high2022-07-01

CVE-2022-33082-Denial of service in Open Policy Agent

View chart →

open-policy-agent/opa · GHSA-2m4x-4q9j-w97g

critical2022-06-30

CVE-2022-33107-Deserialization of Untrusted Data in topthink/framework

View chart →

top-think/framework · GHSA-g377-x8rg-c9mf

critical2022-06-30

CVE-2022-32532-Improper Authorization in Apache Shiro

View chart →

apache/shiro · GHSA-4cf5-xmhp-3xj7

medium2022-06-30

CVE-2022-2252-Open Redirect in microweber

View chart →

microweber/microweber · GHSA-437j-5qc3-c589

high2022-06-30

CVE-2022-2073-Code injection in grav

View chart →

getgrav/grav · GHSA-cxgw-r5jg-7xwq

medium2022-06-29

CVE-2022-31104-Miscompilation of `i8x16.swizzle` and `select` with v128 inputs

View chart →

bytecodealliance/wasmtime · GHSA-jqwc-c49r-4w2x

high2022-06-29

CVE-2022-31052-URL previews of unusual or maliciously-crafted pages can crash Synapse media repositories or Synapse monoliths

View chart →

matrix-org/synapse · GHSA-22p3-qrh9-cx32

high2022-06-29

CVE-2022-0624-Authorization Bypass in parse-path

View chart →

ionicabizau/parse-path · GHSA-3j8f-xvm3-ffx4

medium2022-06-29

CVE-2022-23896-Cross-site Scripting in admidio

View chart →

admidio/admidio · GHSA-qr6m-f3gv-8678

medium2022-06-29

CVE-2022-0085-Server-Side Request Forgery in dompdf/dompdf

View chart →

dompdf/dompdf · GHSA-pf6p-25r2-fx45

medium2022-06-29

CVE-2021-3779-Externally Controlled Reference to a Resource in Another Sphere in ruby-mysql

View chart →

tmtm/ruby-mysql · GHSA-73pr-g6jj-5hc9

medium2022-06-28

CVE-2018-18855-Uncontrolled Resource Consumption in Spray JSON

View chart →

spray/spray-json · GHSA-ww3v-6xjf-jv28

medium2022-06-28

CVE-2022-33146-Open redirect in web2py

View chart →

web2py/web2py · GHSA-cgrj-xjm7-9q27

medium2022-06-28

CVE-2022-2218-Cross site scripting in parse-url

View chart →

ionicabizau/parse-url · GHSA-jpp7-7chh-cf67

high2022-06-28

CVE-2022-26477-SystemDS CPU exhaustion vulnerability

View chart →

apache/systemds · GHSA-m43h-hfrq-x8wx

high2022-06-25

CVE-2022-22967-Salt's PAM auth fails to reject locked accounts

View chart →

saltstack/salt · GHSA-fpxm-fprw-6hxj

medium2022-06-25

CVE-2022-31076-CloudCore UDS Server: Malicious Message can crash CloudCore

View chart →

kubeedge/kubeedge · GHSA-8f4f-v9x5-cg6j

high2022-06-25

CVE-2022-25898-JWS and JWT signature validation vulnerability with special characters

View chart →

kjur/jsrsasign · GHSA-3fvg-4v2m-98jf