Security advisories

medium2022-06-23

CVE-2022-23080-Server-Side Request Forgery in Directus

View chart →

directus/directus · GHSA-5h75-pvq4-82c9

critical2022-06-22

CVE-2022-31605-Unsafe yaml deserialization in NVFlare

View chart →

nvidia/nvflare · GHSA-hrf3-622q-8366

critical2022-06-22

CVE-2022-31604-Unsafe deserialisation in the PKI implementation scheme of NVFlare

View chart →

nvidia/nvflare · GHSA-rcxc-3w2m-mp8h

high2022-06-22

CVE-2022-31092-Improper quoting of columns when using setOrderBy() or setGroupBy() on listing classes in Pimcore

View chart →

pimcore/pimcore · GHSA-gvmf-wcx6-p974

medium2022-06-22

CVE-2022-31057-Authenticated Stored Cross-site Scripting in Shopware

View chart →

shopware/shopware · GHSA-q754-vwc4-p6qj

medium2022-06-22

CVE-2022-31099-Uncontrolled Recursion in rulex

View chart →

rulex-rs/rulex · GHSA-v78m-2q7v-fjqp

high2022-06-22

CVE-2024-21907-Improper Handling of Exceptional Conditions in Newtonsoft.Json

View chart →

jamesnk/newtonsoft.json · GHSA-5crp-9r3c-p9vr

medium2022-06-22

CVE-2022-30874-Cross-site Scripting in NukeViet CMS

View chart →

nukeviet/nukeviet · GHSA-pm37-5j5m-6cvw

medium2022-06-22

CVE-2021-41924-Cross-site Scripting in krayin/laravel-crm

View chart →

krayin/laravel-crm · GHSA-v829-j9rr-85v9

high2022-06-22

CVE-2022-22979-Denial of Service in Spring Cloud Function

View chart →

spring-cloud/spring-cloud-function · GHSA-q588-3544-8g33

medium2022-06-21

CVE-2022-31016-DoS through large manifest files in Argo CD

View chart →

argoproj/argo-cd · GHSA-jhqp-vf4w-rpwq

medium2022-06-21

CVE-2022-31100-Reachable Assertion in rulex

View chart →

rulex-rs/rulex · GHSA-8v9w-p43c-r885

high2022-06-21

CVE-2022-31091-Change in port should be considered a change in origin

View chart →

guzzle/guzzle · GHSA-q559-8m2m-g699

high2022-06-21

CVE-2022-31093-Improper Handling of `callbackUrl` parameter in next-auth

View chart →

nextauthjs/next-auth · GHSA-g5fm-jp9v-2432

medium2022-06-21

CVE-2022-31036-Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server

View chart →

argoproj/argo-cd · GHSA-q4w5-4gq2-98vm

critical2022-06-21

CVE-2022-31035-Argo CD's external URLs for Deployments can include JavaScript

View chart →

argoproj/argo-cd · GHSA-h4w9-6x78-8vrj

high2022-06-21

CVE-2022-31034-Insecure entropy in Argo CD's PKCE/Oauth2/OIDC params

View chart →

argoproj/argo-cd · GHSA-2m7h-86qq-fp4v

high2022-06-21

CVE-2022-31090-CURLOPT_HTTPAUTH option not cleared on change of origin

View chart →

guzzle/guzzle · GHSA-25mq-v84q-4j7r

medium2022-06-21

CVE-2017-20057-Cross site scripting in Elefant CMS

View chart →

jbroadway/elefant · GHSA-xwj7-29j7-rw76

high2022-06-21

CVE-2017-20062-Cross-Site Request Forgery in Elefant CMS

View chart →

jbroadway/elefant · GHSA-pq7f-cq6q-94xh