Security advisories

high2022-06-17

CVE-2022-29866-Uncontrolled Resource Consumption in OPCFoundation.NetStandard.Opc.Ua.Core

View chart →

opcfoundation/ua-.netstandard · GHSA-6fp8-cxc9-4fr9

high2022-06-17

CVE-2022-29862-Security Update for the OPC UA .NET Standard Stack

View chart →

opcfoundation/ua-.netstandard · GHSA-5q2v-6j86-5h9v

medium2022-06-17

CVE-2022-31070-Potential Sensitive Cookie Exposure in NPM Packages @finastra/nestjs-proxy, @ffdc/nestjs-proxy

View chart →

finastra/finastra-nodejs-libs · GHSA-77mv-4rg7-r8qv

medium2022-06-17

CVE-2022-31069-Potential Authorization Header Exposure in NPM Packages @finastra/nestjs-proxy, @ffdc/nestjs-proxy

View chart →

finastra/finastra-nodejs-libs · GHSA-j562-c3cw-3p5g

medium2022-06-17

CVE-2022-31050-Insufficient Session Expiration in TYPO3's Admin Tool

View chart →

typo3-cms/core · GHSA-wwjw-r3gj-39fq

medium2022-06-17

CVE-2022-31049-Cross-Site Scripting in TYPO3's Frontend Login Mailer

View chart →

typo3-cms/core · GHSA-h4mx-xv96-2jgm

medium2022-06-17

CVE-2022-31048-Cross-Site Scripting in TYPO3's Form Framework

View chart →

typo3-cms/core · GHSA-3r95-23jp-mhvg

medium2022-06-17

CVE-2022-31047-Insertion of Sensitive Information into Log File in typo3/cms-core

View chart →

typo3-cms/core · GHSA-fh99-4pgr-8j99

medium2022-06-17

CVE-2022-31046-Information Disclosure via Export Module

View chart →

typo3-cms/core · GHSA-8gmv-9hwg-w89g

high2022-06-17

CVE-2022-31044-Rundeck's Key Storage converter plugin mechanism's encryption layer not working in 4.2.0, 4.2.1, 4.3.0

View chart →

rundeck/rundeck · GHSA-hprf-rrwq-jm5c

medium2022-06-17

Use After Free in Context::start_auth_session

View chart →

parallaxsecond/rust-tss-esapi · GHSA-w3vw-ccc5-qr8v

medium2022-06-17

Formula Injection in Exported Data

View chart →

inventree/inventree-python · GHSA-7rq4-qcpw-74gq

high2022-06-17

CVE-2022-2111-Unrestricted Attachment Upload

View chart →

inventree/inventree-python · GHSA-fr2w-mp56-g4xp

high2022-06-17

Insufficient HTML Sanitization

View chart →

inventree/inventree-python · GHSA-rm89-9g65-4ffr

medium2022-06-17

Ghost vulnerable to remote code execution in locale setting change

View chart →

tryghost/ghost · GHSA-7v28-g2pq-ggg8

medium2022-06-17

CVE-2022-31066-Configuration API in EdgeXFoundry 2.1.0 and earlier exposes message bus credentials to local unauthenticated users

View chart →

edgexfoundry/edgex-go · GHSA-g63h-q855-vp3q

medium2022-06-17

Path traversal for local publishers in TechDocs backend

View chart →

backstage/backstage · GHSA-4jqc-jvh2-pxg9

high2022-06-17

CVE-2022-25856-Insecure path traversal in Git Trigger Source can lead to arbitrary file read

View chart →

argoproj/argo-events · GHSA-qpgx-64h2-gc3c

high2022-06-17

CVE-2022-31054-Uses of deprecated API can be used to cause DoS in user-facing endpoints

View chart →

argoproj/argo-events · GHSA-5q86-62xr-3r57

high2022-06-17

CVE-2022-32210-ProxyAgent vulnerable to MITM

View chart →

nodejs/undici · GHSA-pgw7-wx7w-2w33