Security advisories

high2021-05-18

CVE-2020-8945-GPGME Go wrapper contains Use After Free

View chart →

proglottis/gpgme · GHSA-m6wg-2mwg-4rfq

high2021-05-18

CVE-2020-9283-Improper Verification of Cryptographic Signature in golang.org/x/crypto

View chart →

golang/crypto · GHSA-ffhg-7mh4-33c4

high2021-05-18

CVE-2021-29509-Puma's Keepalive Connections Causing Denial Of Service

View chart →

puma/puma · GHSA-q28m-8xjw-8vr5

medium2021-05-17

CVE-2020-15500-Cross-site scripting in TileServer GL

View chart →

maptiler/tileserver-gl · GHSA-3fr8-mwpp-8h9p

high2021-05-17

CVE-2020-7679-Improperly Controlled Modification of Dynamically-Determined Object Attributes in casperjs

View chart →

casperjs/casperjs · GHSA-vrr3-5r3v-7xfw

medium2021-05-17

CVE-2021-32817-Insecure template handling in express-hbs

View chart →

tryghost/express-hbs · GHSA-rwxp-hwwf-653v

high2021-05-17

CVE-2021-32819-Insecure template handling in Squirrelly

View chart →

squirrellyjs/squirrelly · GHSA-q8j6-pwqx-pm96

critical2021-05-17

CVE-2021-25943-Prototype pollution in 101

View chart →

tjmehta/101 · GHSA-cwcx-rxgc-cmw3

low2021-05-17

User enumeration in authentication mechanisms

View chart →

symfony/symfony · GHSA-g2qj-pmxm-9f8f

low2021-05-17

User enumeration in authentication mechanisms

View chart →

lexik/lexikjwtauthenticationbundle · GHSA-2frx-j9hj-6c65

medium2021-05-17

Nokogiri updates packaged dependency on libxml2 from 2.9.10 to 2.9.12

View chart →

sparklemotion/nokogiri · GHSA-7rrm-v45f-jp64

low2021-05-17

CVE-2021-32618-Open Redirect in Flask-Security-Too

View chart →

flask-middleware/flask-security · GHSA-6qmf-fj6m-686c

medium2021-05-17

File upload local preview can run embedded scripts after user interaction

View chart →

matrix-org/matrix-react-sdk · GHSA-8796-gc9j-63rv

critical2021-05-13

CVE-2021-27582-Autobinding vulnerability in MITREid Connect

View chart →

mitreid-connect/openid-connect-java-spring-server · GHSA-8p36-q63g-68qh

medium2021-05-13

CVE-2021-21043-Reflected Cross-site Scripting (XSS) in ACS Commons

View chart →

adobe-consulting-services/acs-aem-commons · GHSA-7r83-w6r8-fh6w

high2021-05-13

CVE-2021-22696-Authorization service vulnerable to DDos attacks in Apache CFX

View chart →

apache/cxf · GHSA-7q4h-pj78-j7vg

medium2021-05-13

CVE-2021-27906-Uncontrolled Memory Allocation in Apache PDFBox

View chart →

apache/pdfbox · GHSA-6vqp-h455-42mr

medium2021-05-13

CVE-2021-24122-Information Disclosure in Apache Tomcat

View chart →

apache/tomcat · GHSA-2rvv-w9r2-rg7m

medium2021-05-13

CVE-2021-29510-Use of "infinity" as an input to datetime and date fields causes infinite loop in pydantic

View chart →

pydantic/pydantic · GHSA-5jqp-qgf6-3pvh

medium2021-05-13

CVE-2021-21424-Prevent user enumeration using Guard or the new Authenticator-based Security

View chart →

symfony/symfony · GHSA-5pv8-ppvj-4h68