Security advisories

medium2021-08-10

CVE-2021-23413-jszip Vulnerable to Prototype Pollution

View chart →

stuk/jszip · GHSA-jg8v-48h5-wgxg

medium2021-08-10

CVE-2021-23343-Regular Expression Denial of Service in path-parse

View chart →

jbgutierrez/path-parse · GHSA-hj48-42vr-x3v9

medium2021-08-09

CVE-2018-3718-vercel/serve allows access to restricted files if filename is URL encoded.

View chart →

vercel/serve · GHSA-5rc4-8qqh-vq7f

high2021-08-09

CVE-2021-29063-ReDOS in Mpmath

View chart →

fredrik-johansson/mpmath · GHSA-f865-m6cq-j9vx

medium2021-08-09

CVE-2021-23401-Open Redirect in Flask-User

View chart →

lingthio/flask-user · GHSA-4298-89hc-6rfv

high2021-08-09

CVE-2021-32559-Integer overflow in pywin32

View chart →

mhammond/pywin32 · GHSA-hwfp-hg2m-9vr2

medium2021-08-09

CVE-2021-23418-XML External Entity Reference in Glances

View chart →

nicolargo/glances · GHSA-r2mj-8wgq-73m6

high2021-08-09

CVE-2021-23415-Directory Traversal in elFinder.AspNet

View chart →

mguinness/elfinder.aspnet · GHSA-pjxv-w3qj-j8m3

critical2021-08-09

CVE-2021-37578-Deserialization of Untrusted Data in Apache jUDDI

View chart →

apache/juddi · GHSA-9hx8-2mrv-r674

high2021-08-09

CVE-2021-32610-Directory Traversal in Archive_Tar

View chart →

pear/archive_tar · GHSA-p8q8-jfcv-g2h2

critical2021-08-09

CVE-2020-17952-Code injection in topthink/think

View chart →

twothink/twothink · GHSA-ch3r-vp46-8g22

medium2021-08-09

CVE-2021-3663- No Restriction of Excessive Authentication Attempts in Firefly III

View chart →

firefly-iii/firefly-iii · GHSA-56cx-wf47-hx7w

critical2021-08-05

CVE-2021-3013-OS command injection in ripgrep

View chart →

burntsushi/ripgrep · GHSA-g4xg-fxmg-vcg5

high2021-08-05

CVE-2021-32806-URL Redirection to Untrusted Site ('Open Redirect') in Products.isurlinportal

View chart →

plone/products.isurlinportal · GHSA-q3m9-9fj2-mfwr

medium2021-08-05

CVE-2021-32807-Remote Code Execution via unsafe classes in otherwise permitted modules

View chart →

zopefoundation/accesscontrol · GHSA-qcx9-j53g-ccgf

high2021-08-05

CVE-2021-32811-Remote Code Execution via Script (Python) objects under Python 3

View chart →

zopefoundation/zope · GHSA-g4gq-j4p2-j8fr

high2021-08-03

CVE-2021-32804-Arbitrary File Creation/Overwrite due to insufficient absolute path sanitization

View chart →

npm/node-tar · GHSA-3jfq-g458-7qm9

high2021-08-03

CVE-2021-32803-Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning

View chart →

isaacs/node-tar · GHSA-r628-mhmh-qjhw

medium2021-08-03

CVE-2021-32796-Misinterpretation of malicious XML input

View chart →

xmldom/xmldom · GHSA-5fg8-2547-mr8q

high2021-08-03

Improperly Controlled Modification of Object Prototype Attributes

View chart →

thinkjs/think-config · GHSA-6cj2-92m5-7mvp