Security advisories

medium2022-01-06

CVE-2020-8124-Improper Validation and Sanitization in url-parse

View chart →

unshiftio/url-parse · GHSA-46c4-8wrp-j99v

high2022-01-06

CVE-2021-43861-Incorrect sanitisation function leads to `XSS` in mermaid

View chart →

mermaid-js/mermaid · GHSA-p3rp-vmj9-gv6v

medium2022-01-06

CVE-2021-21667-Stored XSS vulnerability in Jenkins Scriptler Plugin

View chart →

jenkinsci/scriptler-plugin · GHSA-p479-rwhp-rwjx

medium2022-01-06

CVE-2021-21668-Stored XSS vulnerability in Jenkins Scriptler Plugin

View chart →

jenkinsci/scriptler-plugin · GHSA-5c6c-w4c4-vgvx

medium2022-01-06

CVE-2020-1692-Cross-Site Request Forgery in Moodle

View chart →

moodle/moodle · GHSA-9328-7pcw-vw69

medium2022-01-06

CVE-2021-41236-XSS vulnerability on email template preview page

View chart →

oroinc/platform · GHSA-qv7g-j98v-8pp7

medium2022-01-06

CVE-2021-43843-jsx-slack insufficient patch for CVE-2021-43838 ReDoS

View chart →

yhatt/jsx-slack · GHSA-hp68-xhvj-x6j6

medium2022-01-06

CVE-2021-43846-CSRF forgery protection bypass in solidus_frontend

View chart →

solidusio/solidus · GHSA-h3fg-h5v3-vf8m

high2022-01-06

CVE-2021-4133-Improper Authorization in Keycloak

View chart →

keycloak/keycloak · GHSA-83x4-9cwr-5487

high2022-01-06

CVE-2021-43853-AjaxNetProfessional deserializes arbitrary JavaScript objects

View chart →

michaelschwarz/ajax.net-professional · GHSA-5q7q-qqw2-hjq7

critical2022-01-06

Remote code injection, Improper Input Validation and Uncontrolled Recursion in Log4j library

View chart →

powernukkit/powernukkit · GHSA-3qpm-h9ch-px3c

high2022-01-06

CVE-2021-43839-Drainage of FeeCollector's Block Transaction Fees in cronos

View chart →

crypto-org-chain/cronos · GHSA-f854-hpxv-cw9r

critical2022-01-06

Incorrect validation of parties IDs leaks secret keys in Secret-sharing scheme

View chart →

keep-network/keep-ecdsa · GHSA-gp6j-vx54-5pmf

medium2022-01-06

CVE-2021-43852-Client-Side JavaScript Prototype Pollution in oro/platform

View chart →

oroinc/platform · GHSA-jx5q-g37m-h5hj

high2022-01-06

CVE-2021-43854-Inefficient Regular Expression Complexity in nltk (word_tokenize, sent_tokenize)

View chart →

nltk/nltk · GHSA-f8m6-h2c7-8h9x

high2022-01-06

CVE-2021-43816-Unprivileged pod using `hostPath` can side-step active LSM when it is SELinux

View chart →

containerd/containerd · GHSA-mvff-h3cj-wj9c

critical2022-01-06

CVE-2021-43857-Gerapy may cause remote code execution

View chart →

gerapy/gerapy · GHSA-9w7f-m4j4-j3xw

critical2022-01-05

CVE-2021-45459-Command Injection in node-windows

View chart →

coreybutler/node-windows · GHSA-53xv-c2hx-5w6q

medium2022-01-05

CVE-2021-4139-Cross-site Scripting in pimcore

View chart →

pimcore/pimcore · GHSA-8xx9-rxrj-2m2w

high2022-01-05

CVE-2021-4131-livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF)

View chart →

livehelperchat/livehelperchat · GHSA-hx77-5p88-f92r