Security advisories

medium2021-09-15

CVE-2021-39391-Cross-site Scripting in Beego

View chart →

beego/beego · GHSA-c77f-4rgj-jfr4

critical2021-09-15

CVE-2021-41264-UUPSUpgradeable vulnerability in @openzeppelin/contracts

View chart →

openzeppelin/openzeppelin-contracts · GHSA-5vp3-v4hc-gx76

critical2021-09-15

UUPSUpgradeable vulnerability in @openzeppelin/contracts-upgradeable

View chart →

openzeppelin/openzeppelin-contracts-upgradeable · GHSA-q4h9-46xg-m3x9

high2021-09-14

CVE-2021-3666-body-parser-xml vulnerable to Prototype Pollution

View chart →

fiznool/body-parser-xml · GHSA-2ghc-6v89-pw9j

high2021-09-14

Any storage file can be downloaded from p.sh if full server path is known

View chart →

ezsystems/ezplatform · GHSA-2rh5-jvgx-pgw3

high2021-09-14

Any storage file can be downloaded from p.sh if full server path is known

View chart →

ibexa/post-install · GHSA-gqcf-83rq-gpfr

medium2021-09-14

CVE-2021-40823-matrix-js-sdk can be tricked into disclosing E2EE room keys to a participating homeserver

View chart →

matrix-org/matrix-js-sdk · GHSA-23cm-x6j7-6hq3

critical2021-09-13

CVE-2021-3645-merge vulnerable to Prototype Pollution

View chart →

viking04/merge · GHSA-cqqh-49mx-fq63

high2021-09-13

CVE-2021-23440-Prototype Pollution in set-value

View chart →

jonschlinkert/set-value · GHSA-4jqc-8m5r-9rpr

critical2021-09-13

CVE-2021-40146-Remote Code Execution in Any23

View chart →

apache/any23 · GHSA-99px-7724-484v

critical2021-09-13

CVE-2021-38555-XML Injection in Any23

View chart →

apache/any23 · GHSA-838r-hvwh-24h8

medium2021-09-13

CVE-2021-24040-Deserialization of Untrusted Data in ParlAI

View chart →

facebookresearch/parlai · GHSA-mwgj-7x7j-6966

high2021-09-13

CVE-2021-40839-Infinite Loop in rencode

View chart →

aresch/rencode · GHSA-gh8j-2pgf-x458

medium2021-09-13

CVE-2021-39207-Deserialization of Untrusted Data in parlai

View chart →

facebookresearch/parlai · GHSA-m87f-9fvv-2mgg

high2021-09-13

CVE-2021-23435-Clearance Gem Open Redirect Vulnerability

View chart →

thoughtbot/clearance · GHSA-4hpq-rjcx-7vj9

critical2021-09-10

CVE-2021-37579-Security check skip in Apache Dubbo

View chart →

apache/dubbo · GHSA-q897-9jxf-jg9r

high2021-09-10

CVE-2021-32839-StripComments filter contains a regular expression that is vulnerable to ReDOS (Regular Expression Denial of Service)

View chart →

andialbrecht/sqlparse · GHSA-p5w8-wqhj-9hhf

critical2021-09-10

CVE-2021-36161-Remote Code Execution in Apache Dubbo

View chart →

apache/dubbo · GHSA-qvm7-23cj-437v

high2021-09-10

CVE-2021-39206-Incorrect Authorization with specially crafted requests

View chart →

pomerium/pomerium · GHSA-cfc2-wjcm-c8fm

high2021-09-10

CVE-2021-39204-Excessive CPU usage

View chart →

pomerium/pomerium · GHSA-5wjf-62hw-q78r