Security advisories

high2021-12-03

CVE-2021-4017-showdoc is vulnerable to Cross-Site Request Forgery (CSRF)

View chart →

star7th/showdoc · GHSA-f77h-m9w2-vvg2

medium2021-12-03

CVE-2021-3990-showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

View chart →

star7th/showdoc · GHSA-vrgh-5w3c-ggf8

low2021-12-03

CVE-2021-3944-bookstack is vulnerable to Cross-Site Request Forgery (CSRF)

View chart →

bookstackapp/bookstack · GHSA-wc7v-77jr-5c3m

high2021-12-02

CVE-2021-43795-Path Traversal in com.linecorp.armeria:armeria

View chart →

line/armeria · GHSA-8fp4-rp6c-5gcv

medium2021-12-02

CVE-2021-27025-Silent Configuration Failure in Puppet Agent

View chart →

puppetlabs/puppet · GHSA-q4g7-jrxv-67r9

medium2021-12-02

CVE-2021-27023-Unsafe HTTP Redirect in Puppet Agent and Puppet Server

View chart →

puppetlabs/puppet · GHSA-93j5-g845-9wqp

medium2021-12-02

CVE-2021-23673-Cross-site Scripting in pekeupload

View chart →

moxiecode/plupload · GHSA-89q5-mj78-pw5w

medium2021-12-02

CVE-2021-23718-Server-Side Request Forgery in ssrf-agent

View chart →

welefen/ssrf-agent · GHSA-6gww-qpm6-mc2g

medium2021-12-02

CVE-2021-25986-Cross-site Scripting in django-wiki

View chart →

django-wiki/django-wiki · GHSA-3m3h-v9hv-9j4h

medium2021-12-02

CVE-2021-40369-Apache JSPWiki Cross-site Scripting due to carefully crafted plugin link invocation

View chart →

apache/jspwiki · GHSA-cfqj-9g2g-w7q6

critical2021-12-02

CVE-2021-44427-SQL Injection in rosariosis

View chart →

francoisjacquet/rosariosis · GHSA-wf5p-f5xr-c4jj

critical2021-12-02

CVE-2021-43998-HashiCorp Vault Incorrect Permission Assignment for Critical Resource

View chart →

hashicorp/vault · GHSA-pfmw-vj74-ph8g

critical2021-12-02

CVE-2019-0230-Improperly Controlled Modification of Dynamically-Determined Object Attributes in Apache Struts

View chart →

apache/struts · GHSA-wp4h-pvgw-5727

critical2021-12-01

CVE-2021-41243-OS Command Injection Vulnerability and Potential Zip Slip Vulnerability in baserCMS

View chart →

baserproject/basercms · GHSA-7rpc-9m88-cf9w

high2021-12-01

CVE-2021-41279-Potential Zip Slip Vulnerability in baserCMS

View chart →

baserproject/basercms · GHSA-4x2f-54wr-4hjg

high2021-12-01

CVE-2021-43776-Cross-Site Scripting vulnerability in @backstage/plugin-auth-backend

View chart →

backstage/backstage · GHSA-w7fj-336r-vw49

high2021-12-01

RCE vulnerability affecting v1beta3 templates in @backstage/plugin-scaffolder-backend

View chart →

backstage/backstage · GHSA-2g8g-63j4-9w3r

high2021-12-01

CVE-2021-43785-Cross-Site Scripting Vulnerability in @joeattardi/emoji-button

View chart →

joeattardi/emoji-button · GHSA-f34m-x9pj-62vq

high2021-12-01

CVE-2021-43783-Path Traversal in @backstage/plugin-scaffolder-backend

View chart →

backstage/backstage · GHSA-mg3m-f475-28hv

medium2021-12-01

XSS in richtext custom tag attributes in ezsystems/ezplatform-richtext

View chart →

ezsystems/ezplatform-admin-ui · GHSA-9jp8-cwwx-p64q