Security advisories

critical2022-06-09

CVE-2022-31313-Backdoor in api-res-py

View chart →

rakeshrkz7/as_api_res · GHSA-6978-4w92-428p

high2022-06-08

CVE-2022-1993-Path Traversal in Git HTTP endpoints in Gogs

View chart →

gogs/gogs · GHSA-6vcc-v9vw-g2x5

critical2022-06-08

CVE-2022-1986-OS Command Injection in file editor in Gogs

View chart →

gogs/gogs · GHSA-67mx-jc2f-jgjm

medium2022-06-08

`MsQueue` `push`/`pop` use the wrong orderings

View chart →

crossbeam-rs/crossbeam · GHSA-rwf4-gx62-rqfw

medium2022-06-08

CVE-2022-31038-Cross-site Scripting vulnerability in repository issue list in Gogs

View chart →

gogs/gogs · GHSA-xq4v-vrp9-vcf2

critical2022-06-08

CVE-2022-1992-Path Traversal in file editor on Windows in Gogs

View chart →

gogs/gogs · GHSA-994f-7g86-qr56

medium2022-06-08

CVE-2020-36534-Cross-Site Request Forgery in easyii CMS

View chart →

noumo/easyii · GHSA-3x3w-vcjx-7796

high2022-06-07

Improperly checked IDs on itemstacks received from the client leading to server crash in PocketMine-MP

View chart →

pmmp/pocketmine-mp · GHSA-fqx3-r75h-vc89

high2022-06-07

CVE-2022-23712-Improper Check for Unusual or Exceptional Conditions in Elasticsearch

View chart →

elastic/elasticsearch · GHSA-wh6w-69xc-5rq5

medium2022-06-07

CVE-2022-28224-Calico vulnerable to pod route hijacking

View chart →

projectcalico/calico · GHSA-9394-xfq9-6qrp

high2022-06-07

CVE-2022-29631-Server-Side Request Forgery in Jodd HTTP

View chart →

oblac/jodd-http · GHSA-pp3c-cf6j-m3ff

critical2022-06-07

CVE-2022-32511-JMESPath for Ruby uses unsafe JSON.load when safe JSON.parse is preferable

View chart →

jmespath/jmespath.rb · GHSA-5c5f-7vfq-3732

medium2022-06-06

CVE-2022-31030-containerd CRI plugin: Host memory exhaustion through ExecSync

View chart →

containerd/containerd · GHSA-5ffw-gxpp-mxpf

high2022-06-06

CVE-2022-1708-Node DOS by way of memory exhaustion through ExecSync request in CRI-O

View chart →

cri-o/cri-o · GHSA-fcm2-6c3h-pg6j

low2022-06-06

CVE-2022-29254-Failed payment recorded has completed in Silverstripe Omnipay

View chart →

silverstripe/silverstripe-omnipay · GHSA-48f2-m7jg-866x

critical2022-06-06

CVE-2022-24840-Path Traversal in django-s3file

View chart →

codingjoe/django-s3file · GHSA-4w8f-hjm9-xwgf

high2022-06-06

CVE-2022-29255-Multiple evaluation of contract address in call in vyper

View chart →

vyperlang/vyper · GHSA-4v9q-cgpw-cf38

high2022-06-06

CVE-2022-31011-TiDB authentication bypass vulnerability

View chart →

pingcap/tidb · GHSA-4whx-7p29-mq22

medium2022-06-06

CVE-2022-31026-Use of Uninitialized Variable in trilogy

View chart →

github/trilogy · GHSA-5g4r-2qhx-vqfm

medium2022-06-06

CVE-2022-31027-Authorization Bypass Through User-Controlled Key when using CILogonOAuthenticator oauthenticator

View chart →

jupyterhub/oauthenticator · GHSA-r7v4-jwx9-wx43