Security advisories

critical2021-05-07

CVE-2020-25020-Improper Restriction of XML External Entity Reference in MPXJ

View chart →

joniles/mpxj · GHSA-wcp5-m52f-mhh5

high2021-05-07

CVE-2020-13933-Authentication bypass in Apache Shiro

View chart →

apache/shiro · GHSA-2vgm-wxr3-6w2j

medium2021-05-07

CVE-2020-1951-Infinite Loop in Apache Tika

View chart →

apache/tika · GHSA-3264-3fm9-fg44

medium2021-05-07

CVE-2020-1950-Uncontrolled Resource Consumption in Apache Tika

View chart →

apache/tika · GHSA-3h29-52vh-pqgr

medium2021-05-07

CVE-2020-9489-Missing Release of Memory after Effective Lifetime in Apache Tika

View chart →

apache/tika · GHSA-4pv3-63jw-4jw2

critical2021-05-07

CVE-2020-13921-SQL Injection in Apache SkyWalking

View chart →

apache/skywalking · GHSA-grpf-gg7v-5g5h

critical2021-05-07

CVE-2020-1957-Improper Authentication in Apache Shiro

View chart →

apache/shiro · GHSA-26gr-cvq3-qxgf

critical2021-05-07

CVE-2020-11989-Improper Authentication in Apache Shiro

View chart →

apache/shiro · GHSA-72w9-fcj5-3fcg

medium2021-05-07

CVE-2021-21419-Improper Handling of Highly Compressed Data (Data Amplification) and Memory Allocation with Excessive Size Value in eventlet

View chart →

eventlet/eventlet · GHSA-9p9m-jm8w-94p2

medium2021-05-06

CVE-2020-10596-Cross-site Scripting in OpenCart

View chart →

myopencart/ocstore · GHSA-36fm-v9wv-56jf

medium2021-05-06

CVE-2020-29315-Cross-site scripting in ThinkAdmin

View chart →

zoujingli/thinkadmin · GHSA-v47f-vp3p-5j6h

critical2021-05-06

CVE-2020-7698-Command injection in Gerapy

View chart →

gerapy/gerapy · GHSA-g57j-q48p-9vm2

critical2021-05-06

CVE-2020-10799-SVGlib Vulnerable to XXE Attacks

View chart →

deeplook/svglib · GHSA-3vcg-8p79-jpcv

high2021-05-06

CVE-2020-25032-Flask-Cors Directory Traversal vulnerability

View chart →

corydolphin/flask-cors · GHSA-xc3p-ff3m-f46v

critical2021-05-06

CVE-2020-7719-Prototype Pollution in locutus

View chart →

kvz/locutus · GHSA-f98m-q3hr-p5wq

high2021-05-06

CVE-2020-7712-trentm/json vulnerable to command injection

View chart →

trentm/json · GHSA-3c6g-pvg8-gqw2

critical2021-05-06

CVE-2020-7708-Prototype Pollution in irrelon-path and @irrelon/path

View chart →

irrelon/irrelon-path · GHSA-j7cg-h9v9-6vqp

medium2021-05-06

CVE-2021-27515-Path traversal in url-parse

View chart →

unshiftio/url-parse · GHSA-9m6j-fcg5-2442

medium2021-05-06

CVE-2021-23362-Regular Expression Denial of Service in hosted-git-info

View chart →

npm/hosted-git-info · GHSA-43f8-2h32-f4cj

medium2021-05-06

CVE-2021-26539-Improper Input Validation in sanitize-html

View chart →

apostrophecms/sanitize-html · GHSA-rjqq-98f6-6j3r