Security Advisories

critical2021-10-04

CVE-2021-41862-Expression injection in AviatorScript

killme2008/aviatorscript · GHSA-xpv2-8ppj-79hh

high2021-10-04

CVE-2021-41129-Pterodactyl Panel vulnerable to authentication bypass due to improper user-provided security token verification

View chart

pterodactyl/panel · GHSA-5vfx-8w6m-h3v4

medium2021-10-04

CVE-2021-40926-Cross-site scripting in demos/demo.mysqli.php in getID3

View chart

jamesheinrich/getid3 · GHSA-x2gw-85w6-fjjw

medium2021-10-04

CVE-2021-41467-Cross-site scripting in application/controllers/dropbox.php in JustWriting

View chart

hjue/justwriting · GHSA-gxmc-5wj3-jx64

medium2021-10-04

CVE-2020-20129-Cross-site Scripting in LaraCMS

View chart

wanglelecc/laracms · GHSA-m72g-42q6-gvc2

critical2021-10-04

CVE-2021-41616-Deserialization of Untrusted Data in org.apache.ddlutils:ddlutils

View chart

apache/ddlutils · GHSA-9378-f4v7-jgm4

medium2021-10-04

CVE-2021-25963-Cross-site Scripting in shuup

View chart

shuup/shuup · GHSA-5pcx-vqjp-p34w

medium2021-09-30

CVE-2021-25959-Cross-site Scripting in OpenCRX

View chart

opencrx/opencrx · GHSA-rwh9-8xx8-4wfm

high2021-09-30

CVE-2021-25962-CSV injection in shuup

View chart

shuup/shuup · GHSA-663j-rjcr-789f

high2021-09-30

CVE-2020-20693-Cross-Site Request Forgery in GilaCMS

View chart

gilacms/gila · GHSA-hwqc-pgjw-vjqp

medium2021-09-30

CVE-2020-20696-Cross-site Scripting in GilaCMS

View chart

gilacms/gila · GHSA-h7mq-27r7-w972

medium2021-09-30

CVE-2020-20695-Cross-site Scripting in GilaCMS

View chart

gilacms/gila · GHSA-6675-wwqr-jhmf

critical2021-09-30

CVE-2020-20120-SQL Injection in topthink/thinkphp

View chart

top-think/thinkphp · GHSA-m7h5-fjjq-559f

high2021-09-30

CVE-2021-23446-Inefficient Regular Expression Complexity in handsontable

View chart

handsontable/handsontable · GHSA-hf66-r44g-p7j9

critical2021-09-30

CVE-2019-11831-Directory Traversal in typo3/phar-stream-wrapper

View chart

typo3/phar-stream-wrapper · GHSA-xv7v-rf6g-xwrc

high2021-09-30

CVE-2021-41109-LiveQuery publishes user session tokens in parse-server

View chart

parse-community/parse-server · GHSA-7pr3-p5fm-8r9x

medium2021-09-29

CVE-2021-41580-Improper Access Control in passport-oauth2

View chart

jaredhanson/passport-oauth2 · GHSA-f794-r6xc-hf3v

critical2021-09-29

CVE-2021-38299-Improper Access Control in Webauthn Framework

View chart

web-auth/webauthn-framework · GHSA-6whf-q6p5-84wg

medium2021-09-29

CVE-2021-3822-Regular Expression Denial of Service in jsoneditor

View chart

josdejong/jsoneditor · GHSA-hhfg-6hfc-rvxm

high2021-09-29

CVE-2021-3828-NLTK Vulnerable to REDoS

View chart

nltk/nltk · GHSA-2ww3-fxvq-293j