Security Advisories | GitStock

medium2021-10-25

CVE-2021-33988-Cross Site Scripting in Microweber

microweber/microweber · GHSA-w7x8-cq7r-g5g9

critical2021-10-25

CVE-2021-41745-Showdoc File Upload Vulnerability

star7th/showdoc · GHSA-4286-h47h-m5v6

high2021-10-25

CVE-2021-42836-github.com/tidwall/gjson Vulnerable to REDoS attack

tidwall/gjson · GHSA-ppj4-34rq-v8j9

medium2021-10-25

CVE-2020-23049-Cross-site scripting in forkcms

forkcms/forkcms · GHSA-3374-7h99-xr85

medium2021-10-25

CVE-2021-41173-Geth Node Vulnerable to DoS via maliciously crafted p2p message

ethereum/go-ethereum · GHSA-59hh-656j-3p7v

low2021-10-25

CVE-2021-41176-pterodactyl/panel CSRF allowing an external page to trigger a user logout event

pterodactyl/panel · GHSA-m49f-hcxp-6hm6

high2021-10-22

CVE-2021-4229-Embedded malware in ua-parser-js

faisalman/ua-parser-js · GHSA-pjwm-rvh2-c87w

medium2021-10-22

CVE-2024-21908-Cross-site scripting vulnerability in TinyMCE

tinymce/tinymce · GHSA-5h9g-x5rv-25wg

high2021-10-22

Authentication Bypass Using an Alternate Path or Channel and Authentication Bypass by Primary Weakness in rucio-webui

rucio/rucio · GHSA-v988-828w-xvf2

medium2021-10-22

CVE-2021-41169-Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in sulu/sulu

sulu/sulu · GHSA-h58v-g3q6-q9fx

high2021-10-22

CVE-2021-41146-Arbitrary command execution on Windows via qutebrowserurl: URL handler

qutebrowser/qutebrowser · GHSA-vw27-fwjf-5qxm

high2021-10-22

CVE-2021-41127-Maliciously Crafted Model Archive Can Lead To Arbitrary File Write

rasahq/rasa · GHSA-4365-fhm5-qcrx

high2021-10-21

CVE-2021-23452-Prototype Pollution in x-assign

mvoorberg/x-assign · GHSA-4mvj-rq4v-2fxw

high2021-10-21

CVE-2021-42771-Directory Traversal in Babel

python-babel/babel · GHSA-h4m5-qpfp-3mpv

high2021-10-21

CVE-2021-41167-modern-async's `forEachSeries` and `forEachLimit` functions do not limit the number of requests

nicolas-van/modern-async · GHSA-3pcq-34w5-p4g2

medium2021-10-21

CVE-2021-3863-Cross-site Scripting in snipe-it

snipe/snipe-it · GHSA-5rg2-6qr5-2xp8

medium2021-10-21

CVE-2020-25703-Exposure of Sensitive Information to an Unauthorized Actor in Moodle

moodle/moodle · GHSA-c7v4-m269-4995

medium2021-10-21

CVE-2021-3858-Cross-Site Request Forgery in snipe-it

snipe/snipe-it · GHSA-g92x-8m54-p89v

medium2021-10-21

CVE-2021-3851-Open Redirect in firefly-iii

firefly-iii/firefly-iii · GHSA-5fvx-5p2r-4mvp

medium2021-10-21

CVE-2021-3879-Cross-site Scripting in snipe-it

snipe/snipe-it · GHSA-9g3v-j3cr-6fc6