Security Advisories | GitStock

medium2022-02-16

CVE-2022-0637-open redirect in pollbot

mozilla/pollbot · GHSA-vg27-hr3v-3cqv

high2022-02-16

Server crash if running Python 3.10 w/ Sanic 20.12

sanic-org/sanic · GHSA-7p79-6x2v-5h88

medium2022-02-16

CVE-2022-24968-Improper Validation of Certificate with Host Mismatch in mellium.im/xmpp/websocket

mellium/xmpp · GHSA-h289-x5wc-xcv8

high2022-02-16

CVE-2022-23639-crossbeam-utils Unsoundness of AtomicCell<{i,u}64> arithmetics on 32-bit targets that support Atomic{I,U}64

crossbeam-rs/crossbeam · GHSA-qc84-gqf4-9926

medium2022-02-16

CVE-2022-23636-Invalid drop of partially-initialized instances in the pooling instance allocator for modules with defined `externref` globals

bytecodealliance/wasmtime · GHSA-88xq-w8cq-xfg7

high2022-02-16

CVE-2022-23632-Skip the router TLS configuration when the host header is an FQDN

traefik/traefik · GHSA-hrhx-6h34-j5hc

high2022-02-16

CVE-2022-21698-Uncontrolled Resource Consumption in promhttp

prometheus/client_golang · GHSA-cg3q-j54f-5p7p

medium2022-02-16

pgjdbc Arbitrary File Write Vulnerability

pgjdbc/pgjdbc · GHSA-673j-qm5f-xpv8

high2022-02-16

CVE-2022-0580-Improper Access Control in librenms

librenms/librenms · GHSA-33wf-4crm-2322

high2022-02-16

CVE-2022-0587-Improper Authorization in librenms

librenms/librenms · GHSA-ppfm-rj6p-38q6

medium2022-02-16

CVE-2022-0588-Missing Authorization in librenms/librenms

librenms/librenms · GHSA-254q-rqmw-vx45

medium2022-02-16

CVE-2022-0589-Cross-site Scripting in librenms

librenms/librenms · GHSA-gj26-g5qf-jrh7

medium2022-02-16

CVE-2022-0596-Microweber vulnerable to Improper Validation of Specified Quantity in Input

microweber/microweber · GHSA-vpq7-m4qm-p2gp

medium2022-02-16

CVE-2022-0597-Open redirect in microweber

microweber/microweber · GHSA-rw98-5846-pqhx

medium2022-02-16

CVE-2022-24684-Nomad Spread Job Stanza May Trigger Panic in Servers

hashicorp/nomad · GHSA-6jm6-cmcp-fqjq

medium2022-02-16

CVE-2022-25177-Improper Link Resolution Before File Access in Jenkins Pipeline: Shared Groovy Libraries Plugin

jenkinsci/workflow-cps-global-lib-plugin · GHSA-q234-x887-9rxh

medium2022-02-16

CVE-2022-25176-Improper Link Resolution Before File Access in Jenkins Pipeline: Groovy Plugin

jenkinsci/workflow-cps-plugin · GHSA-6473-gqrj-4p65

medium2022-02-16

CVE-2022-25178-Improper Limitation of a Pathname to a Restricted Directory in Jenkins Pipeline: Shared Groovy Libraries Plugin

jenkinsci/workflow-cps-global-lib-plugin · GHSA-5hfv-mg5x-mv32

medium2022-02-16

CVE-2022-25185-Stored XSS vulnerability in Jenkins Generic Webhook Trigger Plugin

jenkinsci/generic-webhook-trigger-plugin · GHSA-qqwx-hcp6-25vr

medium2022-02-16

CVE-2022-25184-Password parameter default values exposed by Jenkins Pipeline: Build Step Plugin

jenkinsci/pipeline-build-step-plugin · GHSA-g84f-cmc8-682c