Security advisories

high2022-02-19

CVE-2022-0660-Generation of Error Message Containing Sensitive Information in microweber

View chart →

microweber/microweber · GHSA-hhrj-wp42-32v3

high2022-02-19

CVE-2022-0664-Use of Hard-coded Cryptographic Key in Netmaker

View chart →

gravitl/netmaker · GHSA-6rrw-4fm9-rghv

high2022-02-19

CVE-2022-0666-CRLF Injection in microweber

View chart →

microweber/microweber · GHSA-3wwj-wh2w-g4xp

medium2022-02-19

CVE-2022-0672-Exposure of Sensitive Information to an Unauthorized Actor in LemMinX

View chart →

eclipse/lemminx · GHSA-hrxv-694f-22g3

critical2022-02-19

CVE-2022-0671-Server-Side Request Forgery and Uncontrolled Resource Consumption in LemMinX

View chart →

eclipse/lemminx · GHSA-52vv-3vf7-f7wh

medium2022-02-19

CVE-2022-0673-Path Traversal in LemMinX

View chart →

eclipse/lemminx · GHSA-gggp-gh2p-996x

critical2022-02-19

CVE-2022-25337-Code injection in ezsystems/ezpublish-kernel

View chart →

ezsystems/ezpublish-kernel · GHSA-xwv6-v7qx-f5jc

medium2022-02-19

CVE-2022-25336-Exposure of Resource to Wrong Sphere in ezsystems/ezplatform-kernel

View chart →

ezsystems/ezplatform-kernel · GHSA-x8xx-x82q-42q3

critical2022-02-19

CVE-2021-23702-Prototype Pollution in object-extend

View chart →

bernhardw/object-extend · GHSA-m639-9whg-fw97

medium2022-02-18

CVE-2022-0622-Generation of Error Message Containing Sensitive Information in Snipe-IT

View chart →

snipe/snipe-it · GHSA-pwwm-pwx2-2hw7

medium2022-02-18

CVE-2022-24953-Crypt_GPG does not prevent additional options in GPG calls

View chart →

pear/crypt_gpg · GHSA-59x4-67mh-px54

medium2022-02-18

CVE-2022-0638-Cross-Site Request Forgery microweber

View chart →

microweber/microweber · GHSA-ghww-cv4v-hmxx

medium2022-02-18

CVE-2022-0639-url-parse Incorrectly parses URLs that include an '@'

View chart →

unshiftio/url-parse · GHSA-8v38-pw62-9cw2

critical2022-02-18

CVE-2022-22912-Prototype pollution in Plist before 3.0.5 can cause denial of service

View chart →

tootallnate/plist.js · GHSA-4cpg-3vgw-4877

medium2022-02-17

CVE-2022-23646-Improper CSP in Image Optimization API for Next.js versions between 10.0.0 and 12.1.0

View chart →

vercel/next.js · GHSA-fmvm-x8mv-47mj

medium2022-02-17

CVE-2022-0612-Cross-site Scripting in livehelperchat

View chart →

livehelperchat/livehelperchat · GHSA-h2fj-77wh-fh5w

high2022-02-17

CVE-2022-0611-Improper Privilege Management in Snipe-IT

View chart →

snipe/snipe-it · GHSA-j57w-3c39-gpp5

medium2022-02-17

CVE-2022-0613-Authorization Bypass Through User-Controlled Key in urijs

View chart →

medialize/uri.js · GHSA-gcv8-gh4r-25x6

critical2022-02-17

CVE-2022-24086-Magento improper input validation vulnerability

View chart →

magento/magento2 · GHSA-f8fv-f786-9933

critical2022-02-17

CVE-2022-22885-Improper Certificate Validation in Hutool

View chart →

dromara/hutool · GHSA-p7w9-8mxw-p3g7