Security advisories

medium2021-09-29

CVE-2021-3818-Reliance on Cookies without Validation and Integrity Checking in getgrav/grav

View chart →

getgrav/grav · GHSA-cg3q-59w7-rvc2

medium2021-09-29

CVE-2021-3819-Cross-Site Request Forgery in firefly-iii

View chart →

firefly-iii/firefly-iii · GHSA-356r-77q8-f64f

high2021-09-29

CVE-2021-3820-inflect vulnerable to Inefficient Regular Expression Complexity

View chart →

pksunkara/inflect · GHSA-x55w-vjjp-222r

medium2021-09-29

CVE-2021-23445-Cross site scripting in datatables.net

View chart →

datatables/dist-datatables · GHSA-h73q-5wmj-q8pj

medium2021-09-29

CVE-2021-41106-File reference keys leads to incorrect hashes on HMAC algorithms

View chart →

lcobucci/jwt · GHSA-7322-jrq4-x5hf

high2021-09-29

User can obtain JWT token even if account is disabled

View chart →

ezsystems/ezplatform-rest · GHSA-36mj-6r7r-mqhf

high2021-09-29

CVE-2021-41104-Basic auth bypass in esphome

View chart →

esphome/esphome · GHSA-48mj-p7x2-5jfm

high2021-09-28

CVE-2020-7692-Improper Authorization in Google OAuth Client

View chart →

googleapis/google-oauth-java-client · GHSA-f263-c949-w85g

medium2021-09-27

CVE-2021-28378-Cross-site Scripting in Gitea

View chart →

go-gitea/gitea · GHSA-g95p-88p4-76cm

high2021-09-27

CVE-2021-41098-Improper Restriction of XML External Entity Reference (XXE) in Nokogiri on JRuby

View chart →

sparklemotion/nokogiri · GHSA-2rr5-8q37-2w7h

critical2021-09-27

CVE-2021-41097-Prototype pollution in aurelia-path

View chart →

aurelia/path · GHSA-3c9c-2p65-qvwv

medium2021-09-23

CVE-2021-38153-Observable Discrepancy in Apache Kafka

View chart →

apache/kafka · GHSA-3j6g-hxx5-3q26

medium2021-09-23

Member account takeover

View chart →

tryghost/ghost · GHSA-65p7-pjj8-ggmr

critical2021-09-23

CVE-2021-32619-Deno's static imports inside dynamically imported modules do not adhere to permission checks

View chart →

denoland/deno · GHSA-xpwj-7v8q-mcgj

high2021-09-23

CVE-2021-41088-Elvish vulnerable to remote code execution via the web UI backend

View chart →

elves/elvish · GHSA-fpv6-f8jw-rc3r

critical2021-09-23

CVE-2021-31819-Remote Code Execution in Halibut

View chart →

octopusdeploy/halibut · GHSA-hpf7-4c2g-9chf

high2021-09-23

CVE-2021-3583-Improper Input Validation and Command Injection in Ansible

View chart →

ansible/ansible · GHSA-2pfh-q76x-gwvm

high2021-09-23

CVE-2020-23478-Regular Expression Denial of Service in Leo Editor

View chart →

leo-editor/leo-editor · GHSA-x38q-xg2h-rxgx

medium2021-09-23

CVE-2021-37860-Cross-site Scripting in Mattermost

View chart →

mattermost/mattermost-server · GHSA-hv5f-73mr-7vvj

high2021-09-22

CVE-2021-41086-Clipboard-based XSS

View chart →

jsuites/jsuites · GHSA-qh7x-j4v8-qw5w