Security advisories

medium2021-10-21

CVE-2021-41135-Authz Module Non-Determinism

View chart →

cosmos/cosmos-sdk · GHSA-2p6r-37p9-89p2

high2021-10-21

CVE-2019-10170-Privilege Defined With Unsafe Actions in Keycloak

View chart →

keycloak/keycloak · GHSA-7m27-3587-83xf

high2021-10-19

CVE-2021-41150-Improper sanitization of delegated role names

View chart →

awslabs/tough · GHSA-r56q-vv3c-6g9c

high2021-10-19

CVE-2021-41149-Improper sanitization of target names

View chart →

awslabs/tough · GHSA-x3r5-q6mj-m485

high2021-10-19

CVE-2021-42576-Policies not properly enforced in bluemonday

View chart →

microcosm-cc/bluemonday · GHSA-x95h-979x-cf3j

medium2021-10-19

CVE-2021-41131-Client metadata path-traversal

View chart →

theupdateframework/python-tuf · GHSA-wjw6-2cqr-j4qr

critical2021-10-19

CVE-2021-41078-Nameko Arbitrary code execution due to YAML deserialization

View chart →

nameko/nameko · GHSA-6p52-jr3q-c94g

critical2021-10-19

CVE-2021-23449-Prototype Pollution in vm2

View chart →

patriksimek/vm2 · GHSA-rjf2-j2r6-q8gr

high2021-10-19

CVE-2021-41153-Specification non-compliance in JUMPI

View chart →

rust-blockchain/evm · GHSA-pvh2-pj76-4m96

medium2021-10-19

CVE-2021-41151-Path Traversal in @backstage/plugin-scaffolder-backend

View chart →

backstage/backstage · GHSA-pvv8-8fx9-h673

medium2021-10-18

CVE-2021-42227-Cross site scripting in kindeditor

View chart →

kindsoft/kindeditor · GHSA-wv83-jrfh-rp33

high2021-10-18

CVE-2021-42228-Cross Site Request Forgery in kindeditor

View chart →

kindsoft/kindeditor · GHSA-3ww4-cp53-6g2x

high2021-10-18

CVE-2021-41824-CSV Injection Vulnerability

View chart →

craftcms/cms · GHSA-h7vq-5qgw-jwwq

high2021-10-15

CVE-2021-42340-Missing Release of Resource after Effective Lifetime in Apache Tomcat

View chart →

apache/tomcat · GHSA-wph7-x527-w3h5

critical2021-10-14

CVE-2021-41132-Inconsistent input sanitisation leads to XSS vectors

View chart →

ome/omero-web · GHSA-g67g-hvc3-xmvf

high2021-10-13

Regular expression Denial of Service (ReDoS) in EmailValidator class in V7 compatibility module in Vaadin 8

View chart →

vaadin/framework · GHSA-jfmf-w293-8xr8

medium2021-10-13

CVE-2021-42009-Email relay in Apache Traffic Control

View chart →

apache/trafficcontrol · GHSA-gw97-f6h8-gm94

medium2021-10-13

CVE-2021-33609-Denial of service in DataCommunicator class in Vaadin 8

View chart →

vaadin/framework · GHSA-qcgx-crrx-38v5

medium2021-10-13

CVE-2021-41138-Validity check missing in Frontier

View chart →

polkadot-evm/frontier · GHSA-vj62-g63v-f8mf

medium2021-10-13

CVE-2021-26272-Inclusion of Functionality from Untrusted Control Sphere in CKEditor 4

View chart →

ckeditor/ckeditor4 · GHSA-wpvm-wqr4-p7cw