Security advisories

high2021-09-10

CVE-2021-39162-Incorrect handling of H2 GOAWAY + SETTINGS frames

View chart →

pomerium/pomerium · GHSA-gjcg-vrxg-xmgv

high2021-09-09

CVE-2021-37137- SnappyFrameDecoder doesn't restrict chunk length any may buffer skippable chunks in an unnecessary way

View chart →

netty/netty · GHSA-9vjp-v76f-g363

high2021-09-09

CVE-2021-37136-Bzip2Decoder doesn't allow setting size restrictions for decompressed data

View chart →

netty/netty · GHSA-grg4-wf29-r9vv

medium2021-09-09

CVE-2021-32106-Cross-site scripting in ICEcoder

View chart →

icecoder/icecoder · GHSA-jf9v-q8vh-3fmc

high2021-09-09

CVE-2021-23404-Cross-Site Request Forgery in sqlite-web

View chart →

coleifer/sqlite-web · GHSA-2j58-pwwv-x666

medium2021-09-09

CVE-2021-31274-Cross-site Scripting in LibreNMS

View chart →

librenms/librenms · GHSA-2r2w-jrh2-p4gr

critical2021-09-09

CVE-2021-36440-Unrestricted File Upload in ShowDoc v2.9.5

View chart →

star7th/showdoc · GHSA-c442-3278-rhrg

medium2021-09-08

CVE-2021-32805-Flask-AppBuilder Open Redirect vulnerability

View chart →

dpgaspar/flask-appbuilder · GHSA-624f-cqvr-3qw4

medium2021-09-08

CVE-2021-38698-HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic.

View chart →

hashicorp/consul · GHSA-6hw5-6gcx-phmw

high2021-09-08

CVE-2021-37219-HashiCorp Consul Privilege Escalation Vulnerability

View chart →

hashicorp/consul · GHSA-ccw8-7688-vqx4

high2021-09-08

CVE-2021-37218-Privilege escalation in Hashicorp Nomad

View chart →

hashicorp/nomad · GHSA-c8x3-rg72-fwwg

high2021-09-08

CVE-2021-36162-Remote Code Execution in Apache Dubbo

View chart →

apache/dubbo · GHSA-r577-4hq7-73qh

critical2021-09-08

CVE-2021-36163-Hessian protocol configuration vulnerability in Apache Dubbo

View chart →

apache/dubbo · GHSA-cpx9-4rwv-486v

high2021-09-08

CVE-2021-40143-HTTP header injection in Sonatype Nexus Repository

View chart →

sonatype/nexus-public · GHSA-f34x-8pf6-qc9c

high2021-09-08

CVE-2021-32838-Regular Expression Denial of Service in flask-restx

View chart →

python-restx/flask-restx · GHSA-3q6g-vf58-7m4g

critical2021-09-07

CVE-2021-39199-Unsafe defaults in `remark-html`

View chart →

remarkjs/remark-html · GHSA-9q5w-79cv-947m

critical2021-09-07

CVE-2021-3766-objection.js Prototype Pollution vulnerability

View chart →

vincit/objection.js · GHSA-r659-8xfp-j327

medium2021-09-07

CVE-2021-25737-Incomplete List of Disallowed Inputs in Kubernetes

View chart →

kubernetes/kubernetes · GHSA-mfv7-gq43-w965

medium2021-09-07

CVE-2021-23439-Cross-site Scripting in file-upload-with-preview

View chart →

johndatserakis/file-upload-with-preview · GHSA-97pv-4338-r5vp

medium2021-09-07

CVE-2021-39194-Improper Handling of Missing Values in kaml

View chart →

charleskorn/kaml · GHSA-fmm9-3gv8-58f4