Security Advisories | GitStock

high2021-05-18

CVE-2020-7668-github.com/unknwon/cae Path Traversal vulnerability

unknwon/cae · GHSA-88jf-7rch-32qc

high2021-05-18

CVE-2020-7664-Path Traversal in github.com/unknwon/cae/zip

unknwon/cae · GHSA-vpx7-vm66-qx8r

high2021-05-18

CVE-2016-9122-Go JOSE Signature Validation Bypass

square/go-jose · GHSA-77gc-fj98-665h

high2021-05-18

CVE-2021-29505-XStream is vulnerable to a Remote Command Execution attack

x-stream/xstream · GHSA-7chv-rrw6-w6fc

high2021-05-18

CVE-2021-32620-XWiki users registered with email verification can self re-activate their disabled accounts

xwiki/xwiki-commons · GHSA-76mp-659p-rw65

high2021-05-18

CVE-2021-32621-Script injection without script or programming rights through Gadget titles

xwiki/xwiki-platform · GHSA-h353-hc43-95vc

high2021-05-18

CVE-2018-17419-miekg/dns parsing error leads to nil pointer dereference and DoS

miekg/dns · GHSA-9jcx-pr2f-qvq5

low2021-05-18

CVE-2021-22133-Information Disclosure in go.elastic.co/apm

elastic/apm-agent-go · GHSA-qqc5-rgcc-cjqh

high2021-05-18

CVE-2020-10696-Path Traversal in Buildah

containers/buildah · GHSA-fx8w-mjvm-hvpc

high2021-05-18

CVE-2021-29499-Predictable SIF UUID Identifiers in github.com/sylabs/sif

sylabs/sif · GHSA-4gh8-x3vv-phhg

high2021-05-18

CVE-2019-19029-SQL Injection in Cloud Native Computing Foundation Harbor

goharbor/harbor · GHSA-jr34-mff8-pc6f

high2021-05-18

CVE-2020-10675-Infinite Loop in jsonparser

buger/jsonparser · GHSA-rmh2-65xw-9m6q

high2021-05-18

CVE-2020-13223-Information Disclosure in HashiCorp Vault

hashicorp/vault · GHSA-25xj-89g5-fm6h

high2021-05-18

CVE-2020-7218-Allocation of Resources Without Limits or Throttling in HashiCorp Nomad

hashicorp/nomad · GHSA-h43v-26r7-7j4c

high2021-05-18

CVE-2019-19316-Use of a Broken or Risky Cryptographic Algorithm in Terraform

hashicorp/terraform · GHSA-h3p9-wrgx-82cm

high2021-05-18

CVE-2019-13209-Rancher Vulnerable to Cross-site Request Forgery (CSRF)

rancher/rancher · GHSA-xhg2-rvm8-w2jh

critical2021-05-18

CVE-2019-12405-Improper Authentication in Apache Traffic Control

apache/trafficcontrol · GHSA-3f8r-4qwm-r7jf

high2021-05-18

CVE-2019-0210-Out-of-bounds read in Apache Thrift

apache/thrift · GHSA-jq7p-26h5-w78r

high2021-05-18

CVE-2019-11289-Cloud Foundry Routing Improper Input Validation vulnerability

cloudfoundry/gorouter · GHSA-5796-p3m6-9qj4

medium2021-05-18

CVE-2019-19619-Cross-site Scripting in Documize

documize/community · GHSA-wmwp-pggc-h4mj