Security Advisories | GitStock

medium2021-06-29

CVE-2020-26241-Shallow copy bug in geth

ethereum/go-ethereum · GHSA-69v6-xc2j-r2jf

medium2021-06-29

CVE-2020-26240-Erroneous Proof of Work calculation in geth

ethereum/go-ethereum · GHSA-v592-xf75-856p

medium2021-06-29

CVE-2014-8681-SQL Injection in gogs.io/gogs

gogits/gogs · GHSA-mr6h-chqp-p9g2

critical2021-06-29

CVE-2021-32708-Time-of-check Time-of-use (TOCTOU) Race Condition in league/flysystem

thephpleague/flysystem · GHSA-9f46-5r25-5wfm

high2021-06-28

CVE-2021-32723-Regular Expression Denial of Service (ReDoS) in Prism

prismjs/prism · GHSA-gj77-59wh-66hg

high2021-06-28

Private files publicly accessible with Cloud Storage providers

shopware/platform · GHSA-vrf2-xghr-j52v

critical2021-06-28

CVE-2021-32685-Improper Verification of Cryptographic Signature

togatech/tenvoy · GHSA-7r96-8g3x-g36m

low2021-06-28

Creation of order credits was not validated by acl in admin orders

shopware/platform · GHSA-g7w8-pp9w-7p32

low2021-06-28

CVE-2021-33604-Reflected cross-site scripting in development mode handler in Vaadin 14, 15-19

vaadin/flow · GHSA-c99r-67x4-whj6

high2021-06-28

CVE-2020-12642-XXE vulnerability in Launch import

reportportal/reportportal · GHSA-2jx8-v4hv-gx3h

medium2021-06-23

CVE-2021-32823-Potential Denial-of-Service in bindata

dmendel/bindata · GHSA-hj56-84jw-67h6

low2021-06-23

CVE-2021-34428-SessionListener can prevent a session from being invalidated breaking logout

eclipse/jetty.project · GHSA-m6cp-vxjx-65j6

medium2021-06-23

CVE-2021-21303-Improper Neutralization of Special Elements in Output in helm.sh/helm/v3

helm/helm · GHSA-c38g-469g-cmgx

medium2021-06-23

CVE-2021-32690-Helm passes repository credentials to alternate domain

helm/helm · GHSA-56hp-xqp3-w2jf

medium2021-06-23

Unchecked hostname resolution could allow access to local network resources by users outside the local network

pterodactyl/wings · GHSA-6rg3-8h8x-5xfv

medium2021-06-23

CVE-2021-32699-Asymmetric Resource Consumption (Amplification) in Docker containers created by Wings

pterodactyl/wings · GHSA-jj6m-r8jc-2gp7

high2021-06-23

CVE-2020-7919-Helm uses crypto package vulnerable to panic from malformed X.509 certificate

helm/helm · GHSA-cjjc-xp8v-855w

medium2021-06-23

CVE-2018-20321-Access Control Bypass

rancher/rancher · GHSA-9qq2-xhmc-h9qr

high2021-06-23

CVE-2020-28483-Inconsistent Interpretation of HTTP Requests in github.com/gin-gonic/gin

gin-gonic/gin · GHSA-h395-qcrw-5vmq

high2021-06-23

CVE-2020-35380-Denial of service in GJSON

tidwall/gjson · GHSA-w942-gw6m-p62c