Security advisories

critical2021-06-23

CVE-2020-27846-XML Processing error in github.com/crewjam/saml

View chart →

crewjam/saml · GHSA-4hq8-gmxx-h6w9

critical2021-06-23

CVE-2021-4236-Websocket requests did not call AuthenticateMethod

View chart →

ecnepsnai/web · GHSA-5gjg-jgh4-gppm

medium2021-06-23

CVE-2018-6558-Privilege Escalation in fscrypt

View chart →

google/fscrypt · GHSA-qj26-7grj-whg3

high2021-06-23

CVE-2020-7667-github.com/sassoftware/go-rpmutils Arbitrary File Write via Archive Extraction (Zip Slip)

View chart →

sassoftware/go-rpmutils · GHSA-9423-6c93-gpp8

high2021-06-22

CVE-2021-3603-PHPMailer untrusted code may be run from an overridden address validator

View chart →

phpmailer/phpmailer · GHSA-77mr-wc79-m8j3

medium2021-06-21

CVE-2021-33829-ckeditor4 vulnerable to cross-site scripting

View chart →

ckeditor/ckeditor4 · GHSA-rgx6-rjj4-c388

critical2021-06-21

CVE-2021-25949-set-getter Prototype Pollution Vulnerability

View chart →

doowb/set-getter · GHSA-jv35-xqg7-f92r

critical2021-06-21

CVE-2021-25948-Prototype Pollution

View chart →

doowb/expand-hash · GHSA-x3wr-v4wx-5qpc

medium2021-06-21

CVE-2021-34801-Denial of service in Valine

View chart →

xcss/valine · GHSA-p2c4-gxp4-j3xp

medium2021-06-21

CVE-2021-32693-Authentication granted to all firewalls instead of just one

View chart →

symfony/security-http · GHSA-rfcf-m67m-jcrq

medium2021-06-18

CVE-2020-17522-Cache Manipulation Attack in Apache Traffic Control

View chart →

apache/trafficcontrol · GHSA-pw59-4qgf-jxr8

medium2021-06-18

CVE-2020-26137-CRLF injection in urllib3

View chart →

urllib3/urllib3 · GHSA-wqvq-5m8c-6g24

high2021-06-18

CVE-2021-32633-Remote Code Execution via traversal in TAL expressions

View chart →

zopefoundation/zope · GHSA-5pr9-v234-jw36

medium2021-06-18

CVE-2021-28359-Cross-site Scripting in Apache Airflow

View chart →

apache/airflow · GHSA-3xxv-p78r-4fc6

critical2021-06-18

CVE-2021-31800-Path traversal in impacket

View chart →

fortra/impacket · GHSA-mj63-64x7-57xf

critical2021-06-18

CVE-2021-32090-Command injection in LocalStack

View chart →

localstack/localstack · GHSA-hpr6-f4vq-mxch

medium2021-06-18

CVE-2021-33026-Deserialization of Untrusted Data in Flask-Caching

View chart →

sh4nks/flask-caching · GHSA-656c-6cxf-hvcv

medium2021-06-18

CVE-2020-7655-HTTP Request Smuggling in netius

View chart →

hivesolutions/netius · GHSA-wm2m-xrrp-j74c

medium2021-06-18

CVE-2021-26697-Improper Authentication in Apache Airflow

View chart →

apache/airflow · GHSA-fh37-cx83-q542

medium2021-06-18

CVE-2020-13944-Apache Airflow Cross-site Scripting

View chart →

apache/airflow · GHSA-4pwq-fj89-6rjc