Security advisories

high2021-12-14

CVE-2021-39183-Unsafe inline XSS in pasting DOM element into chat

View chart →

owncast/owncast · GHSA-2hfj-cxw7-g45p

medium2021-12-14

CVE-2022-39384-OpenZeppelin Contracts initializer reentrancy may lead to double initialization

View chart →

openzeppelin/openzeppelin-contracts · GHSA-9c22-pwxw-p6hx

critical2021-12-14

Remote code injection in Log4j

View chart →

splunk/splunk-library-javalogging · GHSA-94g7-hpv8-h9qm

critical2021-12-14

CVE-2021-43821-Files Accessible to External Parties in Opencast

View chart →

opencast/opencast · GHSA-59g4-hpg3-3gcp

high2021-12-14

CVE-2018-16153-Opencast publishes global system account credentials

View chart →

opencast/opencast · GHSA-hcxx-mp6g-6gr9

high2021-12-14

CVE-2021-43807-HTTP Method Spoofing

View chart →

opencast/opencast · GHSA-j4mm-7pj3-jf7v

critical2021-12-14

CVE-2021-41816-Buffer overrun in CGI.escape_html

View chart →

ruby/cgi · GHSA-5cqm-crxm-6qpv

medium2021-12-14

CVE-2021-44528-actionpack Open Redirect in Host Authorization Middleware

View chart →

rails/rails · GHSA-qphc-hf5q-v8fc

high2021-12-14

CVE-2021-43822-SQL injection in jackalope/jackalope-doctrine-dbal

View chart →

jackalope/jackalope-doctrine-dbal · GHSA-ph98-v78f-jqrm

critical2021-12-14

Apache Log4j Remote Code Execution

View chart →

opencast/opencast · GHSA-mf4f-j588-5xm8

high2021-12-14

CVE-2021-4104-JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data

View chart →

apache/logging-log4j2 · GHSA-fp5r-v3w9-4333

high2021-12-13

CVE-2021-43801-Uncaught Exception in mercurius

View chart →

mercurius-js/mercurius · GHSA-273r-rm8g-7f3x

medium2021-12-13

CVE-2021-43818-lxml's HTML Cleaner allows crafted and SVG embedded scripts to pass through

View chart →

lxml/lxml · GHSA-55x5-fj6c-h6m8

medium2021-12-10

CVE-2021-4033-Cross-Site Request Forgery in kimai2

View chart →

kevinpapst/kimai2 · GHSA-4jwx-78vx-gm6g

high2021-12-10

CVE-2021-3815-Prototype Pollution in @fabiocaccamo/utils.js

View chart →

fabiocaccamo/utils.js · GHSA-3xph-cp8f-2229

low2021-12-10

CVE-2021-4049-Cross-Site Request Forgery in remdex/livehelperchat

View chart →

livehelperchat/livehelperchat · GHSA-h86j-6h6m-qjqw

medium2021-12-10

CVE-2021-42567-Cross-site Scripting in Apereo CAS

View chart →

apereo/cas · GHSA-gfhx-jjwq-63gv

high2021-12-10

CVE-2021-4075-Server-Side Request Forgery in snipe/snipe-it

View chart →

snipe/snipe-it · GHSA-553q-hpvp-q8pc

medium2021-12-10

CVE-2021-4005-Cross Site Request Forgery in firefly-iii

View chart →

firefly-iii/firefly-iii · GHSA-hjhp-hwfj-hwf3

critical2021-12-10

CVE-2021-44278-Path traversal in librenms/librenms

View chart →

librenms/librenms · GHSA-7289-chwj-7h86