Security advisories

high2022-03-03

CVE-2022-0819-Code injection in dolibarr/dolibarr

View chart →

dolibarr/dolibarr · GHSA-42qm-c3cf-9wv2

high2022-03-02

CVE-2022-24722-Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in view_component

View chart →

github/view_component · GHSA-cm9w-c4rj-r2cf

high2022-03-02

CVE-2022-23648-containerd CRI plugin: Insecure handling of image volumes

View chart →

containerd/containerd · GHSA-crp2-qrr5-8pq7

critical2022-03-02

CVE-2022-23640-Improper Restriction of XML External Entity Reference in com.monitorjbl:xlsx-streamer

View chart →

monitorjbl/excel-streaming-reader · GHSA-xvm2-9xvc-hx7f

medium2022-03-02

CVE-2022-0743-Cross site scripting in getgrav/grav

View chart →

getgrav/grav · GHSA-2p89-ppc2-mrq4

medium2022-03-02

CVE-2022-26332-Cross-site Scripting in Cipi

View chart →

andreapollastri/cipi · GHSA-vpmw-77vm-4mjg

medium2022-03-02

CVE-2022-0776-Cross site scripting in reveal.js

View chart →

hakimel/reveal.js · GHSA-hhqj-cfjx-vj25

high2022-03-02

CVE-2022-0777-Rate limit missing in microweber

View chart →

microweber/microweber · GHSA-7r79-mrp6-8mhq

critical2022-03-01

CVE-2022-24720-Remote shell execution vulnerability in image_processing

View chart →

janko/image_processing · GHSA-cxf7-qrc5-9446

low2022-03-01

CVE-2022-24719-Forwarding of confidentials headers to third parties in fluture-node

View chart →

fluture-js/fluture-node · GHSA-32x6-qvw6-mxj4

medium2022-03-01

Scrapy cookie-setting is not restricted based on the public suffix list

View chart →

scrapy/scrapy · GHSA-mfjm-vh54-3f96

medium2022-03-01

CVE-2022-0577-Incorrect Authorization and Exposure of Sensitive Information to an Unauthorized Actor in scrapy

View chart →

scrapy/scrapy · GHSA-cjvr-mfj7-j4j8

medium2022-03-01

CVE-2022-24717-Cross Site Scripting (XSS) in @finastra/ssr-pages

View chart →

finastra/ssr-pages · GHSA-7f63-h6g3-7cwm

high2022-03-01

CVE-2022-24718-Path Traversal in @finastra/ssr-pages

View chart →

finastra/ssr-pages · GHSA-w6cx-qg2q-rvq8

medium2022-03-01

Multiple security issues in Pomerium's embedded envoy

View chart →

pomerium/pomerium · GHSA-j34v-3552-5r7j

critical2022-03-01

CVE-2022-0768-Server-Side Request Forgery (SSRF) in rudloff/alltube

View chart →

rudloff/alltube · GHSA-r5hc-wm3g-hjw6

critical2022-03-01

CVE-2022-24711-Remote CLI Command Execution Vulnerability in CodeIgniter4

View chart →

codeigniter4/codeigniter4 · GHSA-xjp4-6w75-qrj7

medium2022-03-01

Possible filesystem space exhaustion by local users

View chart →

google/fscrypt · GHSA-chxf-fjcf-7fwp

high2022-03-01

CVE-2021-41193-Use of Externally-Controlled Format String in wire-avs

View chart →

wireapp/wire-avs · GHSA-2j6v-xpf3-xvrv

medium2022-02-28

CVE-2022-0772-Cross site scripting in LibreNMS

View chart →

librenms/librenms · GHSA-vhm6-gw82-6f8j