Security advisories

high2022-06-11

CVE-2022-24376-OS Command Injection in git-promise

View chart →

piuccio/git-promise · GHSA-chj3-f7xw-367m

high2022-06-11

CVE-2022-24278-Directory traversal in convert-svg-core

View chart →

neocotic/convert-svg · GHSA-5f47-rcg5-9m24

high2022-06-11

CVE-2022-25851-Infinite loop in jpeg-js

View chart →

jpeg-js/jpeg-js · GHSA-xvf7-4v9q-58w6

high2022-06-11

CVE-2022-25845-Unsafe deserialization in com.alibaba:fastjson

View chart →

alibaba/fastjson · GHSA-pv7h-hx5h-mgfj

high2022-06-11

CVE-2022-24429-Code injection via SVG file in convert-svg-core

View chart →

neocotic/convert-svg · GHSA-54px-mhwv-5v8x

high2022-06-11

CVE-2022-21211-Unhandled crash in npm posix

View chart →

ohmu/node-posix · GHSA-27mx-gchc-6xjp

medium2022-06-10

CVE-2022-31045-Ill-formed headers may lead to unexpected behavior in Istio

View chart →

istio/istio · GHSA-xwx5-5c9g-x68x

high2022-06-10

Cross Site Scripting vulnerability in django-jsonform's admin form.

View chart →

bhch/django-jsonform · GHSA-x9jp-4w8m-4f3c

critical2022-06-10

CVE-2022-31830-Server-Side Request Forgery in kityminder

View chart →

fex-team/kityminder · GHSA-q56h-x9h5-q53c

medium2022-06-10

CVE-2022-2016-Cross-site Scripting in FacturaScripts

View chart →

neorazorx/facturascripts · GHSA-j8c7-3jpq-8985

medium2022-06-10

CVE-2022-2036-Cross site scripting in francoisjacquet/rosariosis

View chart →

francoisjacquet/rosariosis · GHSA-4hpr-hh77-6q9p

medium2022-06-09

CVE-2022-31051-Exposure of Sensitive Information to an Unauthorized Actor in semantic-release

View chart →

semantic-release/semantic-release · GHSA-x2pg-mjhr-2m5x

critical2022-06-09

CVE-2022-24065-OS Command Injection in cookiecutter

View chart →

cookiecutter/cookiecutter · GHSA-f4q6-9qm4-h8j4

medium2022-06-09

CVE-2022-31033-Mechanize before v2.8.5 vulnerable to authorization header leak on port redirect

View chart →

sparklemotion/mechanize · GHSA-64qm-hrgp-pgr9

high2022-06-09

CVE-2022-31042-Failure to strip the Cookie header on change in host or HTTP downgrade

View chart →

guzzle/guzzle · GHSA-f2wf-25xc-69c9

high2022-06-09

CVE-2022-31043-Fix failure to strip Authorization header on HTTP downgrade

View chart →

guzzle/guzzle · GHSA-w248-ffj2-4v5q

critical2022-06-09

CVE-2022-21122-Code Injection in metacalc

View chart →

metarhia/metacalc · GHSA-5gc4-cx9x-9c43

medium2022-06-09

CVE-2022-1997-Cross-site Scripting in RosarioSIS

View chart →

francoisjacquet/rosariosis · GHSA-wjh9-344g-vc49

critical2022-06-09

CVE-2022-1996-Authorization Bypass Through User-Controlled Key in go-restful

View chart →

emicklei/go-restful · GHSA-r48q-9g5r-8q2h

medium2022-06-09

CVE-2022-30875-Cross-site Scripting in Dolibarr

View chart →

dolibarr/dolibarr · GHSA-f2g5-426f-353q