Security Advisories

high2021-10-12

CVE-2020-13671-Drupal core Unrestricted Upload of File with Dangerous Type

View chart

drupal/core · GHSA-68jc-v27h-vhmw

critical2021-10-12

CVE-2020-28274-Prototype pollution vulnerability in 'deepref'

View chart

isaymatato/deepref · GHSA-7c7g-72q7-4xhm

critical2021-10-12

CVE-2020-28280-Prototype pollution vulnerability in 'predefine'

View chart

bigpipe/predefine · GHSA-mx3x-ghqm-r43h

critical2021-10-12

CVE-2020-28283-Prototype pollution vulnerability in 'libnested'

View chart

dominictarr/libnested · GHSA-3r9x-mjrm-2725

critical2021-10-12

CVE-2020-28282-Prototype pollution in getobject

View chart

cowboy/node-getobject · GHSA-957j-59c2-j692

medium2021-10-12

CVE-2020-23849-Cross-site Scripting in jsoneditor

View chart

josdejong/jsoneditor · GHSA-q854-j362-cfq9

medium2021-10-12

CVE-2021-23447-Cross-site Scripting in teddy

View chart

rooseveltframework/teddy · GHSA-5f38-9jw2-6r6h

high2021-10-12

CVE-2021-20319-coreos-installer improperly verifies GPG signature when decompressing gzipped artifact

View chart

coreos/coreos-installer · GHSA-3r3g-g73x-g593

low2021-10-12

MD5 hash support in github.com/foxcpp/maddy

View chart

foxcpp/maddy · GHSA-qh54-9vc5-m9fg

low2021-10-12

Path traversal when using `preview-docs` when working dir contains files with question mark `?` in name

View chart

redocly/openapi-cli · GHSA-q324-q795-2q5p

high2021-10-12

CVE-2021-22964-DOS and Open Redirect with user input

View chart

fastify/fastify-static · GHSA-pgh6-m65r-2rhq

high2021-10-12

CVE-2021-21278-Risk of code injection

View chart

diygod/rsshub · GHSA-pgjj-866w-fc5c

medium2021-10-12

CVE-2020-5273-Stored XSS with custom URLs in PrestaShop module ps_linklist

View chart

prestashop/ps_linklist · GHSA-cx2r-mf6x-55rx

medium2021-10-12

CVE-2020-26281-Async-h1 request smuggling possible with long unread bodies

View chart

http-rs/async-h1 · GHSA-4vr9-8cjf-vf9c

high2021-10-12

CVE-2021-41121-Memory corruption when returning a literal struct with a private call inside of it

View chart

vyperlang/vyper · GHSA-xv8x-pr4h-73jv

high2021-10-11

CVE-2021-41117-Insecure random number generation in keypair

View chart

juliangruber/keypair · GHSA-3f99-hvg4-qjwj

high2021-10-06

CVE-2021-41124-Splash authentication credentials potentially leaked to target websites

View chart

scrapy-plugins/scrapy-splash · GHSA-823f-cwm9-4g74

high2021-10-06

CVE-2021-41120-Sylius PayPal Plugin allows unauthorized access to Credit card form, exposing payer name and not requiring 3DS

View chart

sylius/paypalplugin · GHSA-25fx-mxc2-76g7

medium2021-10-06

CVE-2021-41122-missing clamps for decimal args in external functions

View chart

vyperlang/vyper · GHSA-c7pr-343r-5c46

medium2021-10-06

CVE-2021-28170-Improper Input Validation in Jakarta Expression Language

View chart

eclipse-ee4j/el-ri · GHSA-v6w3-2prq-h95f