Security Advisories | GitStock

medium2021-11-10

CVE-2021-41228-Code injection in `saved_model_cli`

tensorflow/tensorflow · GHSA-3rcw-9p9x-582v

medium2021-11-10

CVE-2021-41230-OIDC claims not updated from Identity Provider in Pomerium

pomerium/pomerium · GHSA-j6wp-3859-vxfg

medium2021-11-10

CVE-2021-41251-Unauthorized access to data in @sap-cloud-sdk/core

sap/cloud-sdk-js · GHSA-gp2f-254m-rh32

high2021-11-10

CVE-2021-3924-Path traversal in grav

getgrav/grav · GHSA-8c5p-4362-9333

medium2021-11-10

CVE-2021-25978-Cross-site Scripting in apostrophe

apostrophecms/apostrophe · GHSA-4r9c-jghc-cx5m

high2021-11-10

Insufficient Session Expiration in @cyyynthia/tokenize

cyyynthia/tokenize · GHSA-jcjx-c3j3-44pr

high2021-11-10

CVE-2021-41170-Insecure Inherited Permissions in neoan3-apps/template

sroehrl/neoan3-template · GHSA-3v56-q6r6-4gcw

high2021-11-10

CVE-2021-39182-Improper hashing in enrocrypt

morgan-phoenix/enrocrypt · GHSA-35m5-8cvj-8783

high2021-11-08

Signature verification vulnerability in Stark Bank ecdsa libraries

starkbank/ecdsa-python · GHSA-9wx7-jrvc-28mm

high2021-11-08

CVE-2021-41232-Improper Neutralization of Special Elements used in an LDAP Query in stevenweathers/thunderdome-planning-poker

stevenweathers/thunderdome-planning-poker · GHSA-26cm-qrc6-mfgj

medium2021-11-08

CVE-2021-41174-XSS vulnerability allowing arbitrary JavaScript execution

grafana/grafana · GHSA-3j9m-hcv9-rpj8

medium2021-11-08

CVE-2021-41134-Stored XSS in Jupyter nbdime

jupyter/nbdime · GHSA-p6rw-44q7-3fw4

high2021-11-08

Cross-site Scripting Vulnerability in GraphQL Playground (distributed by Apollo Server)

apollographql/apollo-server · GHSA-qm7x-rc44-rrqw

high2021-11-08

CVE-2021-41249-XSS vulnerability in GraphQL Playground from untrusted schemas

graphql/graphql-playground · GHSA-59r9-6jp6-jcm7

high2021-11-08

CVE-2021-41248-GraphiQL introspection schema template injection attack

graphql/graphiql · GHSA-x4r7-m2q9-69c8

medium2021-11-08

CVE-2021-41247-incomplete JupyterHub logout with simultaneous JupyterLab sessions

jupyterhub/jupyterhub · GHSA-cw7p-q79f-m2v7

medium2021-11-08

CVE-2021-3917-coreos-installer < 0.10.0 writes world-readable Ignition config to installed system

coreos/coreos-installer · GHSA-862g-9h5m-m3qv

medium2021-11-08

CVE-2021-43324-Cross-site Scripting in LibreNMS

librenms/librenms · GHSA-46rx-6jg9-4fh8

medium2021-11-08

CVE-2021-23624-Prototype Pollution in dotty

deoxxa/dotty · GHSA-6g47-63mv-qpgh

low2021-11-08

CVE-2021-23472-Cross-site Scripting in bootstrap-table

wenzhixin/bootstrap-table · GHSA-mw6q-98mp-g8g8