Security Advisories | GitStock

medium2022-01-05

CVE-2021-4132-livehelperchat is vulnerable to Cross-site Scripting

livehelperchat/livehelperchat · GHSA-f7xw-46vh-5jw2

high2022-01-05

CVE-2021-4130-snipe-it is vulnerable to Cross-Site Request Forgery (CSRF)

snipe/snipe-it · GHSA-4w23-c97g-fq5v

high2022-01-05

CVE-2021-23797-Path Traversal in http-server-node

yan-loong/http-server · GHSA-hj3m-v758-jwx5

high2022-01-05

CVE-2021-23450-Prototype Pollution in dojo

dojo/dojo · GHSA-m8gw-hjpr-rjv7

medium2022-01-05

CVE-2021-44116-Cross-site Scripting in Anchor CMS

anchorcms/anchor-cms · GHSA-7mq6-cp5m-f4j5

medium2022-01-04

CVE-2021-44832-Improper Input Validation and Injection in Apache Log4j2

apache/logging-log4j2 · GHSA-8489-44mv-ggj8

medium2022-01-03

CVE-2022-22293-Cross site scripting in dolibarr

dolibarr/dolibarr · GHSA-g5jm-xhwm-9xp9

high2021-12-20

CVE-2020-13846-"Verify All" Returns Success Despite Validation Failures in Singularity

sylabs/singularity · GHSA-6w7g-p4jh-rf92

high2021-12-20

CVE-2016-3697-Privilege Elevation in runc

opencontainers/runc · GHSA-q3j5-32m5-58c2

medium2021-12-20

CVE-2020-15091-Denial of Service in TenderMint

tendermint/tendermint · GHSA-6jqj-f58p-mrw3

medium2021-12-20

CVE-2020-12283-Open redirect vulnerability in Sourcegraph

sourcegraph/sourcegraph · GHSA-mx43-r985-5h4m

critical2021-12-20

Remote Code Execution in npm-groovy-lint

nvuillam/npm-groovy-lint · GHSA-qc22-qwm9-j8rx

critical2021-12-20

CVE-2021-32637-Authelia vulnerable to an authentication bypassed with malformed request URI on nginx

authelia/authelia · GHSA-68wm-pfjf-wqp6

medium2021-12-18

CVE-2021-34141-Incorrect Comparison in NumPy

numpy/numpy · GHSA-fpfv-jqm9-f5jm

high2021-12-18

CVE-2021-41498-Pyo Buffer Overflow Vulnerability

belangeo/pyo · GHSA-qj27-32wp-ghrg

high2021-12-18

CVE-2021-41497-bounter Null pointer reference

rare-technologies/bounter · GHSA-74xw-gwfm-7pv7

high2021-12-17

Using JMSAppender in log4j configuration may lead to deserialization of untrusted data

clickhouse/clickhouse-jdbc-bridge · GHSA-3w6p-8f82-gw8r

medium2021-12-17

CVE-2020-35215-Malicious Atomix node queries expose sensitive information

atomix/atomix · GHSA-g7p8-r2ch-4rmf

high2021-12-17

CVE-2020-35209-An issue in Atomix v3.1.5 allows unauthorized Atomix nodes to join a target cluster via providing configuration information.

atomix/atomix · GHSA-7fr2-94h7-ccg2

high2021-12-17

CVE-2020-35214-An issue in Atomix v3.1.5 allows a malicious Atomix node to remove states of ONOS storage via abuse of primitive operations.

atomix/atomix · GHSA-m4h3-7mc2-v295