Security Advisories | GitStock

medium2021-08-25

CVE-2017-18588-Improper Certificate Validation in security-framework

sfackler/rust-security-framework · GHSA-jqqr-c2r2-9cvr

critical2021-08-25

CVE-2018-20995-Memory corruption slice-deque

gnzlbg/slice_deque · GHSA-hr3c-6mmp-6m39

critical2021-08-25

CVE-2018-20991-Double free in smallvec

servo/rust-smallvec · GHSA-rxr4-x558-x7hw

medium2021-08-25

Multiple memory safety issues in actix-web

actix/actix-web · GHSA-w65j-g6c7-g3m4

medium2021-08-25

CVE-2021-3728-firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF)

firefly-iii/firefly-iii · GHSA-xp5q-77mh-6hm2

medium2021-08-25

CVE-2021-3730-firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF)

firefly-iii/firefly-iii · GHSA-c676-mcw3-qg55

medium2021-08-25

CVE-2021-3729-firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF)

firefly-iii/firefly-iii · GHSA-gp6w-ccqv-p7qr

critical2021-08-25

CVE-2020-36474-SafeCurl before 0.9.2 has a DNS rebinding vulnerability.

vanilla/safecurl · GHSA-x2xg-6wcj-6xf9

high2021-08-25

CVE-2021-39139-XStream is vulnerable to an Arbitrary Code Execution attack

x-stream/xstream · GHSA-64xx-cq4q-mf44

medium2021-08-25

CVE-2021-39140-XStream can cause a Denial of Service

x-stream/xstream · GHSA-6wf9-jmg9-vxcc

high2021-08-25

CVE-2021-39141-XStream is vulnerable to an Arbitrary Code Execution attack

x-stream/xstream · GHSA-g5w6-mrj7-75h2

high2021-08-25

CVE-2021-39144-XStream is vulnerable to a Remote Command Execution attack

x-stream/xstream · GHSA-j9h8-phrw-h4fh

high2021-08-25

CVE-2021-39145-XStream is vulnerable to an Arbitrary Code Execution attack

x-stream/xstream · GHSA-8jrj-525p-826v

high2021-08-25

CVE-2021-39146-XStream is vulnerable to an Arbitrary Code Execution attack

x-stream/xstream · GHSA-p8pq-r894-fm8f

high2021-08-25

CVE-2021-39147-XStream is vulnerable to an Arbitrary Code Execution attack

x-stream/xstream · GHSA-h7v4-7xg3-hxcc

high2021-08-25

CVE-2021-39148-XStream is vulnerable to an Arbitrary Code Execution attack

x-stream/xstream · GHSA-qrx8-8545-4wg2

high2021-08-25

CVE-2021-39149-XStream is vulnerable to an Arbitrary Code Execution attack

x-stream/xstream · GHSA-3ccq-5vw3-2p6x

high2021-08-25

CVE-2021-39150-A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host

x-stream/xstream · GHSA-cxfm-5m4g-x7xp

high2021-08-25

CVE-2021-39151-XStream is vulnerable to an Arbitrary Code Execution attack

x-stream/xstream · GHSA-hph2-m3g5-xxv4

high2021-08-25

CVE-2021-39152-A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host

x-stream/xstream · GHSA-xw4p-crpj-vjx2