Security Advisories | GitStock

medium2021-09-20

CVE-2021-3783-Cross-site Scripting in yourls

yourls/yourls · GHSA-cpq8-x35g-m439

medium2021-09-20

CVE-2021-3785-Cross-site Scripting in yourls

yourls/yourls · GHSA-m9fq-c9hp-59g7

medium2021-09-20

CVE-2021-3780-Cross-site Scripting in peertube

chocobozzz/peertube · GHSA-f2c5-997w-7f5c

high2021-09-20

CVE-2021-3795-semver-regex Regular Expression Denial of Service (ReDOS)

sindresorhus/semver-regex · GHSA-44c6-4v22-4mhx

high2021-09-20

CVE-2021-3794-Inefficient Regular Expression Complexity in vuelidate

vuelidate/vuelidate · GHSA-vvf2-ppj9-pp49

high2021-09-20

CVE-2021-3777-tmpl vulnerable to Inefficient Regular Expression Complexity which may lead to resource exhaustion

daaku/nodejs-tmpl · GHSA-jgrx-mgxx-jf9v

high2021-09-20

CVE-2021-3807-Inefficient Regular Expression Complexity in chalk/ansi-regex

chalk/ansi-regex · GHSA-93q8-gq69-wqmw

high2021-09-20

CVE-2021-3810-Inefficient Regular Expression Complexity in code-server

cdr/code-server · GHSA-49x3-8228-3w3m

high2021-09-20

CVE-2021-23442-Prototype Pollution in cookiex/deep

tony-tsx/cookiex-deep · GHSA-92v9-xh2q-fq9f

high2021-09-20

CVE-2021-3804-Inefficient Regular Expression Complexity in taro

nervjs/taro · GHSA-468q-v4jj-485h

medium2021-09-20

CVE-2021-39219-Wrong type for `Linker`-define functions when used across two `Engine`s

bytecodealliance/wasmtime · GHSA-q879-9g95-56mx

medium2021-09-20

CVE-2021-39218-Out-of-bounds read/write and invalid free with `externref`s and GC safepoints in Wasmtime

bytecodealliance/wasmtime · GHSA-4873-36h9-wv49

medium2021-09-20

CVE-2021-39216-Use after free passing `externref`s to Wasm in Wasmtime

bytecodealliance/wasmtime · GHSA-v4cp-h94r-m7xf

medium2021-09-20

CVE-2021-39189-Observable Response Discrepancy in Lost Password Service

pimcore/pimcore · GHSA-579x-cjvr-cqj9

medium2021-09-20

CVE-2021-39208-Partial path traversal in sharpcompress

adamhathcock/sharpcompress · GHSA-jp7f-grcv-6mjf

critical2021-09-20

CVE-2021-39214-Lacking Protection against HTTP Request Smuggling in mitmproxy

mitmproxy/mitmproxy · GHSA-22gh-3r9q-xf38

medium2021-09-20

CVE-2021-39227-Prototype Pollution in the merge and clone helper methods

ecomfe/zrender · GHSA-fhv8-fx5f-7fxf

medium2021-09-20

CVE-2021-39228-Memory Safety Issue when using patch or merge on state and assign the result back to state

tremor-rs/tremor-runtime · GHSA-mc22-5q92-8v85

medium2021-09-20

Remote command injection when using sendmail email transport

tryghost/ghost · GHSA-wfrj-qqc2-83cm

high2021-09-20

Prototype Pollution in mixme

adaltas/node-mixme · GHSA-84p7-fh9c-6g8h