Security advisories

high2021-06-08

CVE-2021-28677-Uncontrolled Resource Consumption in Pillow

View chart →

python-pillow/pillow · GHSA-q5hq-fp76-qmrc

high2021-06-08

CVE-2021-25288-Pillow Out-of-bounds Read vulnerability

View chart →

python-pillow/pillow · GHSA-rwv7-3v45-hg29

medium2021-06-08

CVE-2021-28678-Insufficient Verification of Data Authenticity in Pillow

View chart →

python-pillow/pillow · GHSA-hjfx-8p6c-g7gx

high2021-06-08

CVE-2021-28675-Pillow denial of service

View chart →

python-pillow/pillow · GHSA-g6rj-rv7j-xwp4

high2021-06-08

CVE-2021-25287-Out-of-bounds Read in Pillow

View chart →

python-pillow/pillow · GHSA-77gc-v2xv-rvvh

high2021-06-08

CVE-2021-28676-Potential infinite loop in Pillow

View chart →

python-pillow/pillow · GHSA-7r7m-5h27-29hp

high2021-06-08

CVE-2021-32674-Remote Code Execution via traversal in TAL expressions

View chart →

zopefoundation/zope · GHSA-rpcg-f9q6-2mq6

critical2021-06-07

CVE-2021-25946-Prototype pollution in nconf-toml

View chart →

robloach/nconf-toml · GHSA-hx7j-43w2-7rj7

high2021-06-07

CVE-2021-33587-Denial of service in css-what

View chart →

fb55/css-what · GHSA-q8pj-2vqx-8ggc

high2021-06-07

CVE-2021-33623-Uncontrolled Resource Consumption in trim-newlines

View chart →

sindresorhus/trim-newlines · GHSA-7p7h-4mm5-852v

high2021-06-07

CVE-2020-28469-glob-parent vulnerable to Regular Expression Denial of Service in enclosure regex

View chart →

gulpjs/glob-parent · GHSA-ww39-953v-wcq6

medium2021-06-07

CVE-2021-32670-Reflected cross-site scripting issue in Datasette

View chart →

simonw/datasette · GHSA-xw7c-jx9m-xh5g

critical2021-06-07

CVE-2017-5929-QOS.ch Logback vulnerable to Deserialization of Untrusted Data

View chart →

qos-ch/logback · GHSA-vmfg-rjjm-rjrj

high2021-06-04

CVE-2020-17495-django-celery-results Stores Sensitive Information In Cleartext

View chart →

celery/django-celery-results · GHSA-fvx8-v524-8579

high2021-06-04

CVE-2021-31542-Path Traversal in Django

View chart →

django/django · GHSA-rxjp-mfm9-w4wr

medium2021-06-03

CVE-2020-13956-Cross-site scripting in Apache HttpClient

View chart →

apache/httpcomponents-client · GHSA-7r82-7xv7-xcpj

high2021-06-02

CVE-2021-26813-markdown2 Regular Expression Denial of Service

View chart →

trentm/python-markdown2 · GHSA-jr9p-r423-9m2r

medium2021-06-01

CVE-2021-20191-Insertion of Sensitive Information into Log File in ansible

View chart →

ansible/ansible · GHSA-8f4m-hccc-8qph

medium2021-06-01

CVE-2021-32635-Action Commands (run/shell/exec) Against Library URIs Ignore Configured Remote Endpoint

View chart →

sylabs/singularity · GHSA-5mv9-q7fq-9394

medium2021-06-01

Action Commands (run/shell/exec) Against Library URIs Ignore Configured Remote Endpoint

View chart →

hpcng/singularity · GHSA-jq42-hfch-42f3