Security advisories

high2022-02-11

CVE-2021-44892-ThinkPHP Remote Code Execution (RCE) vulnerability

View chart →

top-think/framework · GHSA-75jp-87w2-c6x2

critical2022-02-10

CVE-2021-28860-Prototype Pollution in mixme

View chart →

adaltas/node-mixme · GHSA-r5cq-9537-9rpf

critical2022-02-10

CVE-2021-23383-Prototype Pollution in handlebars

View chart →

handlebars-lang/handlebars.js · GHSA-765h-qjxv-5f44

high2022-02-10

CVE-2021-26543-Command injection in git-parse

View chart →

wayfair/git-parse · GHSA-m744-2jj8-vpfv

medium2022-02-10

CVE-2021-23384-Open Redirect in koa-remove-trailing-slashes

View chart →

vgno/koa-remove-trailing-slashes · GHSA-r773-pmw3-f4mr

medium2022-02-10

CVE-2019-10062-Cross-site Scripting in aurelia-framework

View chart →

aurelia/framework · GHSA-m6j2-v3gq-45r5

medium2022-02-10

CVE-2019-19935-DOM-based cross-site scripting in Froala Editor

View chart →

froala/wysiwyg-editor-release · GHSA-h236-g5gh-vq6c

medium2022-02-10

CVE-2020-15366-Prototype Pollution in Ajv

View chart →

ajv-validator/ajv · GHSA-v88g-cgmw-v5xw

medium2022-02-10

CVE-2019-2391-Deserialization of Untrusted Data in bson

View chart →

mongodb/js-bson · GHSA-4jwp-vfvf-657p

medium2022-02-10

CVE-2019-14900-SQL Injection in Hibernate ORM

View chart →

hibernate/hibernate-orm · GHSA-8grg-q944-cch5

critical2022-02-10

CVE-2018-21234-Deserialization of Untrusted Data in Jodd

View chart →

oblac/jodd · GHSA-jrg3-qq99-35g7

high2022-02-10

CVE-2021-31684-Out of bounds read in json-smart

View chart →

netplex/json-smart-v1 · GHSA-fg2v-w576-w4v3

medium2022-02-10

CVE-2021-43841-Cross-site Scripting by SVG upload in xwiki-platform

View chart →

xwiki/xwiki-platform · GHSA-9jq9-c2cv-pcrj

high2022-02-10

CVE-2021-32732-Cross-Site Request Forgery in xwiki-platform

View chart →

xwiki/xwiki-platform · GHSA-vh5c-jqfg-mhrh

medium2022-02-10

CVE-2018-20301-Permissive parameters and privilege escalation

View chart →

smpallen99/coherence · GHSA-mrq8-53r4-3j5m

critical2022-02-10

Possible SQL injection in tablelookupwizard Contao Extension

View chart →

terminal42/contao-tablelookupwizard · GHSA-v3mr-gp7j-pw5w

medium2022-02-10

CVE-2020-14961-Unrestricted Uploads in Concrete5

View chart →

concrete5/concrete5 · GHSA-g4gm-pxh3-29fq

high2022-02-10

CVE-2022-23614-Code injection in Twig

View chart →

twigphp/twig · GHSA-5mv2-rx3q-4w2v

high2022-02-10

CVE-2020-10591-Exposure of Sensitive Information to an Unauthorized Actor in Concord

View chart →

walmartlabs/concord · GHSA-6566-9526-52v6

critical2022-02-10

CVE-2019-11343-Vulnerability in Torpedo Query

View chart →

xjodoin/torpedoquery · GHSA-j7m2-58wv-9v79