Security advisories

critical2022-01-26

CVE-2021-46089-SQL Injection in JeecgBoot

View chart →

jeecgboot/jeecg-boot · GHSA-26hm-r6mg-963c

medium2022-01-21

CVE-2022-0179-Incorrect Default Permissions and Improper Access Control in snipe-it

View chart →

snipe/snipe-it · GHSA-w3v3-cxq5-9vr4

medium2022-01-21

CVE-2022-0159-orchardcore is vulnerable to Cross-site Scripting

View chart →

orchardcms/orchardcore · GHSA-6w5m-jgc5-8cgc

medium2022-01-21

CVE-2021-23566-Exposure of Sensitive Information to an Unauthorized Actor in nanoid

View chart →

ai/nanoid · GHSA-qrpm-p2h7-hrv2

high2022-01-21

CVE-2022-0224-SQL Injection in dolibarr

View chart →

dolibarr/dolibarr · GHSA-j545-frh3-r9gq

high2022-01-21

CVE-2022-0235-node-fetch forwards secure headers to untrusted sites

View chart →

node-fetch/node-fetch · GHSA-r683-j2x4-v87g

medium2022-01-21

CVE-2021-4170-calibre-web is vulnerable to Cross-site Scripting

View chart →

janeczku/calibre-web · GHSA-wrp6-9w7f-3wxg

high2022-01-21

CVE-2021-4080-crater is vulnerable to Unrestricted Upload of File with Dangerous Type

View chart →

crater-invoice/crater · GHSA-wppj-3pjr-9w79

high2022-01-21

CVE-2022-0242-Unrestricted Upload of File with Dangerous Type in Crater

View chart →

crater-invoice/crater · GHSA-728c-42pc-fwxg

medium2022-01-21

CVE-2021-33040-Cross-site Scripting in epubjs

View chart →

futurepress/epub.js · GHSA-c6rp-xvqv-mwmf

medium2022-01-21

CVE-2022-0257-pimcore is vulnerable to Cross-site Scripting

View chart →

pimcore/pimcore · GHSA-v567-q267-phpg

high2022-01-21

CVE-2022-0258-pimcore is vulnerable to SQL Injection

View chart →

pimcore/pimcore · GHSA-vj9x-w7ch-f46p

medium2022-01-21

CVE-2022-0253-livehelperchat is vulnerable to Cross-site Scripting

View chart →

livehelperchat/livehelperchat · GHSA-5r9v-8w62-r26j

medium2022-01-21

CVE-2022-0256-pimcore is vulnerable to Cross-site Scripting

View chart →

pimcore/pimcore · GHSA-57hg-26h7-9qgv

medium2022-01-21

CVE-2021-3862-icecoder is vulnerable to Cross-site Scripting

View chart →

icecoder/icecoder · GHSA-73q9-7pwj-gm46

high2022-01-21

CVE-2021-4164-calibre-web is vulnerable to Cross-Site Request Forgery (CSRF)

View chart →

janeczku/calibre-web · GHSA-wxr6-29pv-ch68

critical2022-01-21

CVE-2021-4171-calibre-web is vulnerable to Business Logic Errors

View chart →

janeczku/calibre-web · GHSA-xp7p-3gx7-j6wx

medium2022-01-21

CVE-2022-21683-Comment reply notifications sent to incorrect users

View chart →

wagtail/wagtail · GHSA-xqxm-2rpm-3889

critical2022-01-21

CVE-2021-43831-Files on the host computer can be accessed from the Gradio interface

View chart →

gradio-app/gradio · GHSA-rhq2-3vr9-6mcr

critical2022-01-21

CVE-2022-0239-corenlp is vulnerable to Improper Restriction of XML External Entity Reference

View chart →

stanfordnlp/corenlp · GHSA-75vw-3m5v-fprh