Security advisories

medium2022-01-13

CVE-2022-23117-Agent-to-controller security bypass in Jenkins Conjur Secrets Plugin allows retrieving all credentials

View chart →

jenkinsci/conjur-credentials-plugin · GHSA-cw68-xmm4-c83r

medium2022-01-13

CVE-2022-23111-CSRF vulnerability and missing permission checks in Jenkins Publish Over SSH Plugin

View chart →

jenkinsci/publish-over-ssh-plugin · GHSA-884c-9wwh-9p6v

medium2022-01-13

CVE-2022-23116-Agent-to-controller security bypass in Jenkins Conjur Secrets Plugin allows decrypting secrets

View chart →

jenkinsci/conjur-credentials-plugin · GHSA-g7fx-mmjc-r7gv

high2022-01-13

CVE-2022-23118-Agent-to-controller security bypass in Jenkins Debian Package Builder Plugin

View chart →

jenkinsci/debian-package-builder-plugin · GHSA-8xjp-rp29-v5j8

high2022-01-12

CVE-2021-23568-Prototype Pollution in extend2

View chart →

eggjs/extend2 · GHSA-gjm5-83cw-p3p2

critical2022-01-12

CVE-2021-23594-Prototype Pollution in realms-shim

View chart →

agoric/realms-shim · GHSA-pwm7-qr6j-3vjg

medium2022-01-12

CVE-2022-0174-Logic error in dolibarr

View chart →

dolibarr/dolibarr · GHSA-8qvx-f5gf-g43v

high2022-01-12

CVE-2022-0155-Exposure of sensitive information in follow-redirects

View chart →

follow-redirects/follow-redirects · GHSA-74fj-2j2h-c42q

medium2022-01-12

CVE-2022-21671-Potential exposure of tokens to an Unauthorized Actor

View chart →

replit/crosis · GHSA-7w54-gp8x-f33m

high2022-01-12

CVE-2021-21408-Access to restricted PHP code by dynamic static class access in smarty

View chart →

smarty-php/smarty · GHSA-4h9c-v5vg-5m6m

high2022-01-12

CVE-2021-29454-Sandbox Escape by math function in smarty

View chart →

smarty-php/smarty · GHSA-29gp-2c3m-3j6m

high2022-01-12

CVE-2022-21668-Pipenv's requirements.txt parsing allows malicious index url in comments

View chart →

pypa/pipenv · GHSA-qc9x-gjcv-465w

medium2022-01-12

CVE-2022-21670-Uncontrolled Resource Consumption in markdown-it

View chart →

markdown-it/markdown-it · GHSA-6vfc-qv3f-vr6c

high2022-01-12

CVE-2022-0087-Reflected cross-site scripting (XSS) vulnerability

View chart →

keystonejs/keystone · GHSA-hrgx-7j6v-xj82

medium2022-01-12

CVE-2022-22815-Improper Initialization in Pillow

View chart →

python-pillow/pillow · GHSA-pw3c-h7wp-cvhx

medium2022-01-12

CVE-2022-22816-Out-of-bounds Read in Pillow

View chart →

python-pillow/pillow · GHSA-xrcv-f9gm-v42c

critical2022-01-12

CVE-2022-22817-Arbitrary expression injection in Pillow

View chart →

python-pillow/pillow · GHSA-8vj2-vxx3-667w

high2022-01-12

CVE-2022-22846-dnslib has DNS reply verification issue

View chart →

paulc/dnslib · GHSA-r478-c2pc-m7gx

high2022-01-12

CVE-2021-45116-Information disclosure in Django

View chart →

django/django · GHSA-8c5j-9r9f-c6w8

medium2022-01-12

CVE-2021-45452-Directory-traversal in Django

View chart →

django/django · GHSA-jrh2-hc4r-7jwx