Security Advisories | GitStock

medium2021-11-15

CVE-2021-3931-snipe-it is vulnerable to Cross-Site Request Forgery (CSRF)

snipe/snipe-it · GHSA-533p-cp2g-99wp

medium2021-11-15

CVE-2021-3921-firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF)

firefly-iii/firefly-iii · GHSA-q2cv-94xm-qvg4

high2021-11-15

CVE-2021-3915-bookstack is vulnerable to Unrestricted Upload of File with Dangerous Type

bookstackapp/bookstack · GHSA-w2f4-hxpm-mq98

high2021-11-15

CVE-2021-41266-Authentication bypass issue in the Operator Console

minio/console · GHSA-4999-659w-mq36

medium2021-11-15

CVE-2021-3775-showdoc is vulnerable to Cross-Site Request Forgery (CSRF)

star7th/showdoc · GHSA-pjjf-hc4q-g298

medium2021-11-15

CVE-2021-3683-showdoc is vulnerable to Cross-Site Request Forgery (CSRF)

star7th/showdoc · GHSA-x5jp-9fmm-m9pf

medium2021-11-15

CVE-2021-3776-showdoc is vulnerable to Cross-Site Request Forgery (CSRF)

star7th/showdoc · GHSA-m4hj-wg2r-qpcr

high2021-11-15

CVE-2021-3945-Cross-site Scripting in django-helpdesk

django-helpdesk/django-helpdesk · GHSA-vx6v-xg64-pmr8

medium2021-11-15

CVE-2021-41263-Rails Multisite secure/signed cookies share secrets between sites in a multi-site application

discourse/rails_multisite · GHSA-844m-cpr9-jcmh

high2021-11-15

CVE-2021-3572-Improper Input Validation in pip

pypa/pip · GHSA-5xp3-jfq3-5q8x

medium2021-11-15

CVE-2021-41038-Improper Verification of Communication Channel in @theia/plugin-ext

eclipse-theia/theia · GHSA-w6v7-w58j-pg5r

medium2021-11-15

CVE-2021-43561-Cross-site Scripting in pegasus/google-for-jobs

pegasuswerbeagentur/google_for_jobs · GHSA-hfm8-2q22-h7hv

high2021-11-15

CVE-2021-43564-Unrestricted access to predictable file paths in hov/jobfair

nhovratov/jobfair · GHSA-43g8-79x3-j898

high2021-11-15

CVE-2021-41254-Privilege escalation to cluster admin on multi-tenant environments

fluxcd/kustomize-controller · GHSA-35rf-v2jv-gfg7

high2021-11-11

CVE-2021-43174-Memory exhaustion in routinator

nlnetlabs/routinator · GHSA-6mv9-qcx2-3hh3

critical2021-11-10

CVE-2021-43571-Improper Verification of Cryptographic Signature in starkbank-ecdsa

starkbank/ecdsa-node · GHSA-q9q6-f556-gpm7

critical2021-11-10

CVE-2021-43569-Improper Verification of Cryptographic Signature in starkbank-ecdsa

starkbank/ecdsa-dotnet · GHSA-j3jw-j2j8-2wv9

critical2021-11-10

CVE-2021-43570-Improper Verification of Cryptographic Signature in starkbank-ecdsa

starkbank/ecdsa-java · GHSA-r28h-x6hv-2fq3

critical2021-11-10

CVE-2021-43572-Improper Verification of Cryptographic Signature in starkbank-ecdsa

starkbank/ecdsa-python · GHSA-92vm-mxjf-jqf3

medium2021-11-10

CVE-2021-3908-Infinite certificate chain depth results in OctoRPKI running forever

cloudflare/cfrpki · GHSA-g5gj-9ggf-9vmq