Security advisories

medium2021-06-15

CVE-2021-20329-go.mongodb.org/mongo-driver improperly validates cstrings when marshalling Go objects into BSON

View chart →

mongodb/mongo-go-driver · GHSA-f6mq-5m25-4r72

high2021-06-15

CVE-2021-23394-elFinder unsafe upload filtering leading to remote code execution

View chart →

studio-42/elfinder · GHSA-qm58-cvvm-c5qr

high2021-06-15

CVE-2021-34363-The Fuck Arbitrary File Deletion via Path Traversal

View chart →

nvbn/thefuck · GHSA-8wwf-2644-f8x4

high2021-06-11

CVE-2021-33880-Observable Timing Discrepancy in aaugustin websockets library

View chart →

aaugustin/websockets · GHSA-8ch4-58qp-g3mp

high2021-06-10

CVE-2020-28924-Use of Cryptographically Weak Pseudo-Random Number Generator in Rclone

View chart →

rclone/rclone · GHSA-rmw5-xpg9-jr29

high2021-06-10

CVE-2021-33571-Django Access Control Bypass possibly leading to SSRF, RFI, and LFI attacks

View chart →

django/django · GHSA-p99v-5w3c-jqq9

medium2021-06-10

CVE-2021-33203-Path Traversal in Django

View chart →

django/django · GHSA-68w8-qjq3-2gfm

high2021-06-10

CVE-2021-20259-Exposure of Sensitive Information to an Unauthorized Actor in foreman_fog_proxmox

View chart →

theforeman/foreman_fog_proxmox · GHSA-f2rp-4rv7-fc95

high2021-06-10

CVE-2021-32677-Cross-Site Request Forgery (CSRF) in FastAPI

View chart →

tiangolo/fastapi · GHSA-8h2j-cgx8-6xv7

medium2021-06-10

CVE-2021-28169-Jetty Utility Servlets ConcatServlet Double Decoding Information Disclosure Vulnerability

View chart →

eclipse/jetty.project · GHSA-gwcr-j4wh-j3cq

high2021-06-09

CVE-2019-20916-Path Traversal in pip

View chart →

pypa/pip · GHSA-gpvv-69j7-gwj8

high2021-06-09

CVE-2020-12690-Insufficient Session Expiration in OpenStack Keystone

View chart →

openstack/keystone · GHSA-6m8p-x4qw-gh5j

medium2021-06-09

CVE-2021-32052-Header injection possible in Django

View chart →

django/django · GHSA-qm57-vhq3-3fwf

medium2021-06-08

CVE-2021-33508-Cross-site scripting in Plone

View chart →

plone/plone · GHSA-rmpv-rcp6-v8wc

medium2021-06-08

CVE-2021-33513-Cross-site scripting in Plone

View chart →

plone/plone · GHSA-fj67-w3m4-rfmp

critical2021-06-08

CVE-2021-25945-Prototype pollution vulnerability in js-extend

View chart →

vmattos/js-extend · GHSA-mh82-55cm-6gfh

critical2021-06-08

CVE-2021-29300-Command Injection in @ronomon/opened

View chart →

ronomon/opened · GHSA-fg5w-w99f-rj6w

high2021-06-08

CVE-2021-33502-ReDoS in normalize-url

View chart →

sindresorhus/normalize-url · GHSA-px4h-xg32-q955

medium2021-06-08

CVE-2021-28055-Predictable CSRF tokens in centreon/centreon

View chart →

centreon/centreon · GHSA-7rg4-266c-jqw6

medium2021-06-08

CVE-2021-27673-reflected XSS in tribalsystems/zenario

View chart →

tribalsystems/zenario · GHSA-8hcm-jj4x-4gmr