Security advisories

high2022-02-12

CVE-2020-13677-Drupal core access bypass vulnerability

View chart →

drupal/core · GHSA-3xr3-phjp-g6p2

medium2022-02-12

CVE-2021-44111-Path Traversal in S-Cart

View chart →

s-cart/s-cart · GHSA-h676-pjr4-hgqx

critical2022-02-12

CVE-2021-23555-Sandbox bypass in vm2

View chart →

patriksimek/vm2 · GHSA-6pw2-5hjv-9pf7

high2022-02-11

CVE-2020-26521-Nil dereference in NATS JWT, DoS of nats-server

View chart →

nats-io/jwt · GHSA-h2fg-54x9-5qhq

critical2022-02-11

CVE-2020-26892-Incorrect handling of credential expiry by /nats-io/nats-server

View chart →

nats-io/jwt · GHSA-4w5x-x539-ppf5

low2022-02-11

CVE-2022-2583-gobase subject to Incorrect routing of some HTTP requests when using httpauth due to a race condition

View chart →

ntbosscher/gobase · GHSA-h2x7-2ff6-v32p

critical2022-02-11

CVE-2020-27955-Git LFS can execute a Git binary from the current directory

View chart →

git-lfs/git-lfs · GHSA-4g4p-42wc-9f3m

low2022-02-11

personnummer/go vulnerable to Improper Input Validation

View chart →

personnummer/go · GHSA-hv53-vf5m-8q94

medium2022-02-11

CVE-2020-15157-containerd v1.2.x can be coerced into leaking credentials during image pull

View chart →

containerd/containerd · GHSA-742w-89gc-8m9c

medium2022-02-11

CVE-2020-8911-CBC padding oracle issue in AWS S3 Crypto SDK for golang

View chart →

aws/aws-sdk-go · GHSA-f5pg-7wfw-84q9

low2022-02-11

CVE-2020-8912-In-band key negotiation issue in AWS S3 Crypto SDK for golang

View chart →

aws/aws-sdk-go · GHSA-7f33-f4f5-xwgw

medium2022-02-11

CVE-2020-15129-Traefik vulnerable to Open Redirect via handling of X-Forwarded-Prefix header

View chart →

traefik/traefik · GHSA-6qq8-5wq3-86rp

high2022-02-11

CVE-2020-8918-TPM 1.2 key authorization values vulnerable to TPM transport eavesdropper in go-tpm

View chart →

google/go-tpm · GHSA-5x29-3hr9-6wpw

medium2022-02-11

CVE-2019-19030-Unauthenticated users can exploit an enumeration vulnerability in Harbor (CVE-2019-19030)

View chart →

goharbor/harbor · GHSA-q9x4-q76f-5h5j

high2022-02-11

CVE-2022-23634-Puma used with Rails may lead to Information Exposure

View chart →

puma/puma · GHSA-rmj8-8hhh-gv5h

high2022-02-11

CVE-2022-23633-Exposure of information in Action Pack

View chart →

rails/rails · GHSA-wh98-p28r-vrc9

low2022-02-11

Chrono has potential segfault issue in SPIFFE authenticator

View chart →

parallaxsecond/parsec · GHSA-45w3-v3g4-54pm

high2022-02-11

CVE-2021-23597-Uncaught Exception in fastify-multipart

View chart →

fastify/fastify-multipart · GHSA-qh73-qc3p-rjv2

medium2022-02-11

CVE-2022-0532-Incorrect Permission Assignment for Critical Resource in CRI-O

View chart →

cri-o/cri-o · GHSA-jqmc-79gx-7g8p

medium2022-02-11

CVE-2022-0558-Cross-site Scripting in microweber

View chart →

microweber/microweber · GHSA-wmj9-xh24-j4gx