Security advisories

low2022-06-01

CVE-2022-29253-Path Traversal in XWiki Platform

View chart →

xwiki/xwiki-platform · GHSA-9qrp-h7fw-42hg

medium2022-06-01

CVE-2022-29245-Weak private key generation in SSH.NET

View chart →

sshnet/ssh.net · GHSA-72p8-v4hg-v45p

medium2022-06-01

CVE-2022-30973-Regular expression denial of service in apache tika

View chart →

apache/tika · GHSA-qw3f-w4pf-jh5f

high2022-06-01

CVE-2022-23082-Path traversal in CureKit

View chart →

whitesource/curekit · GHSA-m9vj-44f3-78xw

medium2022-05-30

CVE-2022-1928-Stored Cross-site Scripting in gitea

View chart →

go-gitea/gitea · GHSA-ph3w-2843-72mx

high2022-05-28

CVE-2022-25878-Prototype Pollution in protobufjs

View chart →

protobufjs/protobuf.js · GHSA-g954-5hwp-pp24

high2022-05-27

CVE-2022-30122-Denial of Service Vulnerability in Rack Multipart Parsing

View chart →

rack/rack · GHSA-hxqx-xwvh-44m2

critical2022-05-27

CVE-2022-30123-Possible shell escape sequence injection vulnerability in Rack

View chart →

rack/rack · GHSA-wq4h-7r42-5hrr

medium2022-05-27

CVE-2021-4231-Angular vulnerable to Cross-site Scripting

View chart →

angular/angular · GHSA-c75v-2vq8-878f

high2022-05-27

CVE-2022-30500-SQL injection in jflyfox jfinal

View chart →

jflyfox/jflyfox_jfinal · GHSA-595x-hh6c-hfv8

medium2022-05-26

CVE-2022-29362-Cross-site Scripting in ZKEACMS

View chart →

seriawei/zkeacms · GHSA-hc72-vj3g-5g2g

critical2022-05-26

CVE-2022-26945-HashiCorp go-getter command injection

View chart →

hashicorp/go-getter · GHSA-x24g-9w7v-vprh

high2022-05-26

CVE-2022-30595-Buffer over-flow in Pillow

View chart →

python-pillow/pillow · GHSA-hr8g-f6r6-mr22

high2022-05-26

CVE-2022-30321-HashiCorp go-getter unsafe downloads

View chart →

hashicorp/go-getter · GHSA-fcgg-rvwg-jv58

high2022-05-26

CVE-2022-30322-HashiCorp go-getter unsafe downloads could lead to arbitrary host access

View chart →

hashicorp/go-getter · GHSA-cjr4-fv6c-f3mv

high2022-05-26

CVE-2022-30323-HashiCorp go-getter unsafe downloads could lead to asymmetric resource exhaustion

View chart →

hashicorp/go-getter · GHSA-28r2-q6m8-9hpx

critical2022-05-25

Malware in ctx

View chart →

figlief/ctx · GHSA-4g82-3jcr-q52w

high2022-05-25

CVE-2022-30999-Possible cross-site scripting attack via unsanitized SVG files in FoF Upload

View chart →

friendsofflarum/upload · GHSA-fm53-mpmp-7qw2

high2022-05-25

CVE-2022-29252-Cross-site Scripting in wiki manager join wiki page

View chart →

xwiki/xwiki-platform · GHSA-ph5x-h23x-7q5q

high2022-05-25

CVE-2022-29251-Cross-site Scripting in the Flamingo theme manager

View chart →

xwiki/xwiki-platform · GHSA-vmhh-xh3g-j992