Security Advisories | GitStock

medium2021-11-08

CVE-2021-23784-Cross-site Scripting in tempura

lukeed/tempura · GHSA-w4v7-hwx7-9929

medium2021-11-08

CVE-2021-23807-Prototype Pollution in node-jsonpointer

janl/node-jsonpointer · GHSA-282f-qqgm-c34q

medium2021-11-08

CVE-2021-23509-Prototype Pollution in json-ptr

flitbit/json-ptr · GHSA-8gwj-8hxc-285w

medium2021-11-08

CVE-2021-23820-Prototype Pollution in json-pointer

manuelstofer/json-pointer · GHSA-v5vg-g7rq-363w

critical2021-11-04

Embedded malware in rc

dominictarr/rc · GHSA-g2q5-5433-rhrf

critical2021-11-04

Embedded malware in coa

veged/coa · GHSA-73qr-pfmq-6rp8

critical2021-11-03

CVE-2020-5312-PCX P mode buffer overflow in Pillow

python-pillow/pillow · GHSA-p49h-hjvm-jg3h

high2021-11-03

CVE-2020-10378-Out-of-bounds read in Pillow

python-pillow/pillow · GHSA-3xv8-3j54-hgrp

critical2021-11-03

CVE-2020-5310-Integer overflow in Pillow

python-pillow/pillow · GHSA-vcqg-3p29-xw73

high2021-11-03

CVE-2021-3840-Antilles Dependency Confusion Vulnerability

lenovo/antilles · GHSA-hgc3-hp6x-wpgx

medium2021-11-03

Unexpected panics in num-bigint

rust-num/num-bigint · GHSA-v935-pqmr-g8v9

medium2021-11-03

CVE-2021-3765-Inefficient Regular Expression Complexity in validator.js

validatorjs/validator.js · GHSA-qgmg-gppg-76g5

medium2021-11-03

CVE-2021-25973-Publify `guest` role users can self-register even when the admin does not allow it

publify/publify · GHSA-x24j-87x9-jvv5

medium2021-11-03

CVE-2021-33611-Reflected cross-site scripting in vaadin-menu-bar webjar resources in Vaadin 14

vaadin/platform · GHSA-93c4-vf86-3rj7

high2021-11-03

CVE-2021-41238-Missing Authorization with Default Settings in Dashboard UI

hangfireio/hangfire · GHSA-7rq6-7gv8-c37h

high2021-11-03

CVE-2020-11476-Unrestricted Uploads in Concrete5

concrete5/concrete5 · GHSA-hf9p-9r39-r2h3

medium2021-11-02

CVE-2024-21910-Cross-site scripting vulnerability in TinyMCE plugins

tinymce/tinymce · GHSA-r8hm-w5f7-wj39

critical2021-11-02

CVE-2020-36378-Vulnerability in packageCmd function leads to arbitrary code execution via filePath parameters

shenzhim/aaptjs · GHSA-4qwq-q4pr-rr7r

critical2021-11-02

CVE-2020-36379-Vulnerability in remove function leads to arbitrary code execution via filePath parameters

shenzhim/aaptjs · GHSA-9cq3-fj2h-ggj5

critical2021-11-02

CVE-2020-36377-Vulnerability in dump function leads to arbitrary code execution via filePath parameters

shenzhim/aaptjs · GHSA-r496-7hgp-53wf