Security advisories

low2022-03-22

CVE-2022-21718-Renderers can obtain access to random bluetooth device without permission in Electron

View chart →

electron/electron · GHSA-3p22-ghq8-v749

high2022-03-22

CVE-2022-25481-Exposure of Resource to Wrong Sphere in ThinkPHP Framework

View chart →

top-think/framework · GHSA-69wp-xwm7-69wm

high2022-03-22

CVE-2022-25766-Command Injection in ungit

View chart →

fredriknoren/ungit · GHSA-hf8c-xr89-vfm5

critical2022-03-20

CVE-2022-26265-Remote Code Execution in Contao Managed Edition

View chart →

contao/managed-edition · GHSA-rggc-4g3r-j7ff

high2022-03-20

CVE-2022-0991-Insufficient Session Expiration in Admidio

View chart →

admidio/admidio · GHSA-mf79-f657-47ww

high2022-03-19

CVE-2022-24302-Race Condition in Paramiko

View chart →

paramiko/paramiko · GHSA-f8q4-jwww-x3wv

critical2022-03-19

CVE-2022-24637-Improper Privilege Management in Open Web Analytics

View chart →

open-web-analytics/open-web-analytics · GHSA-pr9q-v585-qv2w

medium2022-03-18

CVE-2022-27200-Stored Cross-site Scripting in folder-auth plugin

View chart →

jenkinsci/folder-auth-plugin · GHSA-5vjc-qx43-r747

high2022-03-18

CVE-2022-21822-Allocation of Resources Without Limits or Throttling in nvflare

View chart →

nvidia/nvflare · GHSA-jx8f-cpx7-fv47

medium2022-03-18

Possibility for Denial of Service by overwriting PHP files with language exports

View chart →

barryvdh/laravel-translation-manager · GHSA-3fvf-2gp4-89wq

high2022-03-18

CVE-2022-24770-Improper Neutralization of Formula Elements in a CSV File in Gradio Flagging

View chart →

gradio-app/gradio · GHSA-f8xq-q7px-wg8c

medium2022-03-18

CVE-2022-24773-Improper Verification of Cryptographic Signature in `node-forge`

View chart →

digitalbazaar/forge · GHSA-2r2c-g63r-vccr

high2022-03-18

CVE-2022-24772-Improper Verification of Cryptographic Signature in node-forge

View chart →

digitalbazaar/forge · GHSA-x4jg-mjrx-434g

high2022-03-18

CVE-2022-24771-Improper Verification of Cryptographic Signature in node-forge

View chart →

digitalbazaar/forge · GHSA-cfm4-qjh2-4765

high2022-03-18

Improperly checked metadata on tools/armour itemstacks received from the client

View chart →

pmmp/pocketmine-mp · GHSA-46c5-pfj8-fv65

high2022-03-18

CVE-2022-24761-HTTP Request Smuggling in waitress

View chart →

pylons/waitress · GHSA-4f7p-27jc-3c36

high2022-03-18

CVE-2020-14326-RESTEasy 4.5.5.Final in hash flooding

View chart →

resteasy/resteasy · GHSA-37g7-8vjj-pjpj

high2022-03-18

CVE-2021-21655-Cross-Site Request Forgery in Jenkins P4 Plugin

View chart →

jenkinsci/p4-plugin · GHSA-3rj3-qp2j-4fj2

critical2022-03-18

CVE-2022-25352-Prototype Pollution in libnested

View chart →

dominictarr/libnested · GHSA-x5m8-2r8v-8f97

medium2022-03-18

CVE-2022-25296-Prototype Pollution in bodymen

View chart →

diegohaz/bodymen · GHSA-vhxc-fhm5-qcp9