Security advisories

critical2021-11-18

CVE-2021-41275-Spree Auth Devise vulnerability allows for authentication bypass through CSRF weakness

View chart →

spree/spree_auth_devise · GHSA-26xx-m4q2-xhq8

critical2021-11-18

Authentication Bypass by CSRF Weakness

View chart →

solidusio/solidus · GHSA-5629-8855-gf4g

critical2021-11-18

CVE-2021-41274-Authentication Bypass by CSRF Weakness

View chart →

solidusio/solidus_auth_devise · GHSA-xm34-v85h-9pg2

low2021-11-18

CVE-2021-41190-Clarify Content-Type handling

View chart →

opencontainers/distribution-spec · GHSA-mc8v-mgrf-8f4m

low2021-11-18

Ambiguous OCI manifest parsing

View chart →

containerd/containerd · GHSA-5j5w-g665-5m35

low2021-11-18

Clarify `mediaType` handling

View chart →

opencontainers/image-spec · GHSA-77vh-xpmg-72qh

medium2021-11-18

CVE-2021-41273-Cross-Site Request Forgery allowing sending of test emails and generation of node auto-deployment keys

View chart →

pterodactyl/panel · GHSA-wwgq-9jhf-qgw6

high2021-11-17

CVE-2021-25976-Cross-Site Request Forgery in PiranhaCMS

View chart →

piranhacms/piranha.core · GHSA-ppq7-88c7-q879

critical2021-11-17

CVE-2021-37580-Improper Authentication in Apache ShenYu Admin

View chart →

apache/shenyu · GHSA-vpfp-5gwq-g533

high2021-11-17

CVE-2021-41165-HTML comments vulnerability allowing to execute JavaScript code

View chart →

ckeditor/ckeditor4 · GHSA-7h26-63m7-qhf2

high2021-11-17

CVE-2021-41164-Advanced Content Filter (ACF) vulnerability allowing to execute JavaScript code using malformed HTML

View chart →

ckeditor/ckeditor4 · GHSA-pvmx-g8h5-cprj

high2021-11-16

CVE-2021-43620-Improper Input Validation in fruity

View chart →

nvzqz/fruity · GHSA-h352-g5vw-3926

critical2021-11-16

CVE-2021-43608-DBAL 3 SQL Injection Security Vulnerability

View chart →

doctrine/dbal · GHSA-r7cj-8hjg-x622

medium2021-11-16

CVE-2021-41258-Cross-site scripting (XSS) from image block content in the site frontend

View chart →

getkirby/kirby · GHSA-cq58-r77c-5jjw

medium2021-11-16

CVE-2021-41252-Cross-site scripting (XSS) from writer field content in the site frontend

View chart →

getkirby/kirby · GHSA-x7j7-qp7j-hw3q

high2021-11-16

CVE-2021-41817-Regular expression denial of service vulnerability (ReDoS) in date

View chart →

ruby/date · GHSA-qg54-694p-wgpp

low2021-11-15

ERC1155Supply vulnerability in OpenZeppelin Contracts

View chart →

openzeppelin/openzeppelin-contracts · GHSA-wmpv-c2jp-j2xg

critical2021-11-15

CVE-2021-41269-Critical vulnerability found in cron-utils

View chart →

jmrozanec/cron-utils · GHSA-p9m8-27x8-rg87

low2021-11-15

CVE-2021-3938-snipe-it is vulnerable to Cross-site Scripting

View chart →

snipe/snipe-it · GHSA-2cqg-q7jm-j35c

medium2021-11-15

CVE-2021-3932-twill is vulnerable to Cross-Site Request Forgery (CSRF)

View chart →

area17/twill · GHSA-f99g-pg48-wrfc