Security Advisories | GitStock

high2022-06-03

CVE-2021-34078-OS Command Injection in lifion-verify-deps

lifion/lifion-verify-deps · GHSA-rphm-c8gw-3r38

high2022-06-03

CVE-2021-34079-Command injection in docker-tester

mintzo/docker-testing · GHSA-rj88-4777-828h

high2022-06-03

CVE-2021-34080-OS Command injection in ssl-utils

es128/ssl-utils · GHSA-552j-pv39-f3jf

critical2022-06-03

CVE-2020-28246-Server-Side Template Injection in formio

formio/formio · GHSA-52vj-mr2j-f8jh

medium2022-06-03

CVE-2022-1982-Uncontrolled Resource Consumption in Mattermost server

mattermost/mattermost-server · GHSA-gwpf-95jc-63rv

medium2022-06-03

CVE-2022-30429-Neos CMS vulnerable to XSS in various backend modules

neos/neos · GHSA-7m9h-v68w-pfw3

critical2022-06-03

CVE-2021-33473-Arbitrary file write in dragonfly

markevans/dragonfly · GHSA-fj34-jhjx-xmvv

medium2022-06-03

CVE-2022-29718-Open redirect in caddy

caddyserver/caddy · GHSA-2927-hv3p-f3vp

critical2022-06-02

Login timing attack in ibexa/core

ibexa/core · GHSA-2x4v-g8cx-jxrq

critical2022-06-02

Login timing attack in ezsystems/ezpublish-kernel

ezsystems/ezpublish-kernel · GHSA-xfqg-p48g-hh94

critical2022-06-02

Login timing attack in ezsystems/ezplatform-kernel

ezsystems/ezplatform-kernel · GHSA-342c-vcff-2ff2

critical2022-06-02

CVE-2021-32546-OS Command Injection in gogs

gogs/gogs · GHSA-56j7-2pm8-rgmx

critical2022-06-02

CVE-2022-1884-OS Command Injection in gogs

gogs/gogs · GHSA-958j-443g-7mm7

low2022-06-02

Cross site scripting via cookies in gogs

gogs/gogs · GHSA-pj96-4jhv-v792

high2022-06-02

CVE-2022-31015-Uncaught Exception (due to a data race) leads to process termination in Waitress

pylons/waitress · GHSA-f5x9-8jwc-25rw

high2022-06-02

CVE-2022-29244-Packing does not respect root-level ignore files in workspaces

npm/cli · GHSA-hj9c-8jmm-8c52

high2022-06-02

Phoenix-ws source code and data in extensions folder is publicly available

froggo8311/phoenix · GHSA-c8f7-x2g7-7fxj

low2022-06-01

CVE-2022-31000-CSRF allows attacker to finalize/unfinalize order adjustments in solidus_backend

solidusio/solidus · GHSA-8639-qx56-r428

high2022-06-01

CVE-2022-29258-Cross-site Scripting in Filter Stream Converter Application in XWiki Platform

xwiki/xwiki-platform · GHSA-xjfw-5vv5-vjq2

medium2022-06-01

CVE-2022-29256-sharp vulnerable to Command Injection in post-installation over build environment

lovell/sharp · GHSA-gp95-ppv5-3jc5