Security advisories

high2022-04-05

CVE-2022-24758-Sensitive Auth & Cookie data stored in Jupyter server logs

View chart →

jupyter/notebook · GHSA-m87f-39q9-6f55

medium2022-04-05

CVE-2022-24795-Buffer Overflow in yajl-ruby

View chart →

brianmario/yajl-ruby · GHSA-jj47-x69x-mxrm

high2022-04-05

CVE-2021-43464-Remote code execution in Subrion

View chart →

intelliants/subrion · GHSA-g54x-29xv-58h5

medium2022-04-05

CVE-2022-1233-URL Confusion When Scheme Not Supplied in medialize/uri.js

View chart →

medialize/uri.js · GHSA-g694-m8vq-gv9h

high2022-04-04

Incorrect Comparison in Vyper

View chart →

vyperlang/vyper · GHSA-7vrm-3jc8-5wwm

critical2022-04-04

CVE-2022-24801-Inconsistent Interpretation of HTTP Requests in twisted.web

View chart →

twisted/twisted · GHSA-c2jg-hw38-jrqq

high2022-04-04

CVE-2022-24785-Path Traversal: 'dir/../../filename' in moment.locale

View chart →

moment/moment · GHSA-8hfj-j24r-96c4

medium2022-04-04

Opened exploitable ports in default docker-compose.yaml in go-ipfs

View chart →

ipfs/go-ipfs · GHSA-fx5p-f64h-93xc

critical2022-04-04

CVE-2022-28368-Remote code injection in dompdf/dompdf

View chart →

dompdf/dompdf · GHSA-x752-qjv4-c4hc

low2022-04-04

CVE-2022-0088-Cross-Site Request Forgery in YOURLS

View chart →

yourls/yourls · GHSA-gx7g-wjxg-jwwj

medium2022-04-04

CVE-2022-28378-Cross-site Scripting in craftcms/cms

View chart →

craftcms/cms · GHSA-7xj5-fwqr-5378

medium2022-04-03

CVE-2022-21830-Cross-site Scripting in @rocket.chat/livechat

View chart →

rocketchat/rocket.chat.livechat · GHSA-hf55-c445-2w97

medium2022-04-03

CVE-2022-22950-Allocation of Resources Without Limits or Throttling in Spring Framework

View chart →

spring-projects/spring-framework · GHSA-558x-2xjg-6232

critical2022-04-03

CVE-2022-22963-Spring Cloud Function Code Injection with a specially crafted SpEL as a routing expression

View chart →

spring-cloud/spring-cloud-function · GHSA-6v73-fgf6-w5j7

critical2022-04-03

CVE-2022-27177-Use of Externally-Controlled Format String in consoleme

View chart →

netflix/consoleme · GHSA-74w3-2r77-fw5h

critical2022-04-02

CVE-2021-44135-SQL injection in pagekit/pagekit

View chart →

pagekit/pagekit · GHSA-45hc-r4fj-qj89

high2022-04-02

CVE-2022-21223-Command injection in cocoapods-downloader

View chart →

cocoapods/cocoapods-downloader · GHSA-g397-v4w5-4m79

high2022-04-02

CVE-2022-24440-Command injection in cocoapods-downloader

View chart →

cocoapods/cocoapods-downloader · GHSA-7627-mp87-jf6q

high2022-04-02

CVE-2022-24066-Command injection in simple-git

View chart →

steveukx/git-js · GHSA-28xr-mwxg-3qc8

high2022-04-01

CVE-2022-27649-Podman's default inheritable capabilities for linux container not empty

View chart →

containers/podman · GHSA-qvf8-p83w-v58j