Security advisories

critical2021-09-01

CVE-2021-28034-Double free in stack_dst

View chart →

thepowersgang/stack_dst-rs · GHSA-8mjx-h23h-w2pg

high2021-09-01

CVE-2021-28029-Uninitialized memory access in toodee

View chart →

antonmarsden/toodee · GHSA-xm9m-2vj8-fmfr

critical2021-09-01

CVE-2021-28028-Double free in toodee

View chart →

antonmarsden/toodee · GHSA-wcvp-r8j8-47pc

critical2021-09-01

CVE-2019-19208-Code injection in codiad

View chart →

codiad/codiad · GHSA-v92m-hhhw-vv9v

medium2021-09-01

CVE-2021-39132-YAML deserialization can run untrusted code

View chart →

rundeck/rundeck · GHSA-q4rf-3fhx-88pf

high2021-09-01

CVE-2021-39133-Cross-Site Request Forgery (CSRF) can run untrusted code on Rundeck server

View chart →

rundeck/rundeck · GHSA-3jmw-c69h-426c

low2021-09-01

CVE-2021-39163-Adding a private/unlisted room to a community exposes room metadata in an unauthorised manner.

View chart →

matrix-org/synapse · GHSA-jj53-8fmw-f2w2

low2021-09-01

CVE-2021-39164-Improper authorisation of members discloses room membership to non-members

View chart →

matrix-org/synapse · GHSA-3x4c-pq33-4w3q

high2021-09-01

CVE-2021-39176-Missing Release of Memory after Effective Lifetime in detect-character-encoding

View chart →

sonicdoe/detect-character-encoding · GHSA-5rwj-j5m3-3chj

high2021-09-01

CVE-2021-39178-XSS in Image Optimization API for Next.js

View chart →

vercel/next.js · GHSA-9gr3-7897-pp7m

high2021-09-01

CVE-2020-6950-Directory traversal in Eclipse Mojarra

View chart →

eclipse-ee4j/mojarra · GHSA-rpq8-mmwh-q9hm

high2021-09-01

CVE-2021-3749-axios Inefficient Regular Expression Complexity vulnerability

View chart →

axios/axios · GHSA-cph5-m8f7-6c5x

medium2021-09-01

CVE-2021-39193-Transaction validity oversight in pallet-ethereum

View chart →

polkadot-evm/frontier · GHSA-hw4v-5x4h-c3xm

high2021-09-01

CVE-2021-39166-Improper Neutralization of Text-Values in Object Version Preview

View chart →

pimcore/pimcore · GHSA-w6j8-jc36-x5q9

high2021-09-01

CVE-2021-39170-Improper Encoding or Escaping of Output in Asset Metadata Component

View chart →

pimcore/pimcore · GHSA-2v88-qq7x-xq5f

high2021-08-31

CVE-2021-37701-Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic links

View chart →

npm/node-tar · GHSA-9r2w-394v-53qc

high2021-08-31

CVE-2021-37712-Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic links

View chart →

npm/node-tar · GHSA-qq89-hq3f-393p

high2021-08-31

CVE-2021-37713-Arbitrary File Creation/Overwrite on Windows via insufficient relative path sanitization

View chart →

npm/node-tar · GHSA-5955-9wpr-37jh

high2021-08-31

CVE-2021-39134-@npmcli/arborist vulnerable to UNIX Symbolic Link (Symlink) Following

View chart →

npm/arborist · GHSA-2h3h-q99f-3fhc

high2021-08-31

CVE-2021-39135-UNIX Symbolic Link (Symlink) Following in @npmcli/arborist

View chart →

npm/arborist · GHSA-gmw6-94gg-2rc2