Security advisories

high2022-03-11

CVE-2022-0905-Gitea Missing Authorization vulnerability

View chart →

go-gitea/gitea · GHSA-jr9c-h74f-2v28

critical2022-03-11

CVE-2022-24193-Command Injection in CasaOS

View chart →

icewhaletech/casaos · GHSA-jh63-28gx-7p26

low2022-03-11

CVE-2022-26520-Path traversal in org.postgresql:postgresql

View chart →

pgjdbc/pgjdbc · GHSA-727h-hrw8-jg8q

high2022-03-11

CVE-2021-44673-Unrestricted Upload of File with Dangerous Type in Croogo

View chart →

croogo/croogo · GHSA-4pww-fqgh-36hj

medium2022-03-11

CVE-2021-44585-Cross-site Scripting in jeecg-boot

View chart →

jeecgboot/jeecg-boot · GHSA-q448-6c3m-cxmj

high2022-03-10

CVE-2022-26652-Arbitrary file write in nats-server

View chart →

nats-io/nats-server · GHSA-6h3m-36w8-hv68

high2022-03-10

CVE-2022-24753-Code injection in Stripe CLI on windows

View chart →

stripe/stripe-cli · GHSA-4cx6-fj7j-pjx9

medium2022-03-10

CVE-2022-24748-Incorrect Authentication in shopware

View chart →

shopware/platform · GHSA-83vp-6jqg-6cmr

medium2022-03-10

CVE-2022-24747-HTTP caching is marking private HTTP headers as public in Shopware

View chart →

shopware/platform · GHSA-6wrh-279j-6hvw

medium2022-03-10

CVE-2022-24746-HTML injection possibility in voucher code form in Shopware

View chart →

shopware/platform · GHSA-952p-fqcp-g8pc

low2022-03-10

CVE-2022-24744-Shopware user session is not logged out if the password is reset via password recovery

View chart →

shopware/platform · GHSA-w267-m9c4-8555

medium2022-03-10

CVE-2022-24745-Shopware guest session is shared between customers

View chart →

shopware/platform · GHSA-jp6h-mxhx-pgqh

critical2022-03-10

CVE-2022-0482-Exposure of Private Personal Information to an Unauthorized Actor in alextselegidis/easyappointments

View chart →

alextselegidis/easyappointments · GHSA-r6cm-wg48-rh2r

high2022-03-10

CVE-2022-0896-Improper Neutralization of Special Elements Used in a Template Engine in microweber

View chart →

microweber/microweber · GHSA-q9qc-pp5x-mc8c

high2022-03-09

CVE-2022-24739-Server-Side Request Forgery and Open Redirect in AllTube Download

View chart →

rudloff/alltube · GHSA-75p7-527p-w8wp

medium2022-03-09

CVE-2022-0877-Cross-site Scripting in BookStack

View chart →

bookstackapp/bookstack · GHSA-5rcc-6cmj-7728

critical2022-03-08

CVE-2022-21831-Possible code injection vulnerability in Rails / Active Storage

View chart →

rails/rails · GHSA-w749-p3v6-hccq

high2022-03-08

CVE-2022-24713-Rust's regex crate vulnerable to regular expression denial of service

View chart →

rust-lang/regex · GHSA-m5pq-gvj9-9vr8

medium2022-03-08

CVE-2022-0697-Open Redirect in archivy

View chart →

archivy/archivy · GHSA-28mg-98xm-q493

critical2022-03-08

CVE-2022-0767-Server-Side Request Forgery in calibreweb

View chart →

janeczku/calibre-web · GHSA-h65g-jfqg-2w6m