Security advisories

critical2021-05-06

CVE-2021-23358-Arbitrary Code Execution in underscore

View chart →

jashkenas/underscore · GHSA-cf4h-3jhx-xvhq

high2021-05-06

CVE-2021-23337-Command Injection in lodash

View chart →

lodash/lodash · GHSA-35jh-r3h4-6jhm

critical2021-05-06

CVE-2021-23369-Remote code execution in handlebars when compiling templates

View chart →

wycats/handlebars.js · GHSA-f2jv-r9rf-7988

medium2021-05-06

CVE-2021-23380-Arbitrary command execution in roar-pidusage

View chart →

svjard/pidusage · GHSA-xfxf-qw26-hr33

critical2021-05-06

CVE-2021-23376-Command Injection in ffmpegdotjs

View chart →

tromesh/ffmpegdotjs · GHSA-f39r-cpmj-whcg

high2021-05-06

CVE-2021-23381-Command Injection in killing

View chart →

xudafeng/killing · GHSA-cq77-8jpx-892g

high2021-05-06

CVE-2021-23379-Command injection in portkiller

View chart →

indatawetrust/portkiller · GHSA-r6fw-8m27-43c9

high2021-05-06

CVE-2021-23375-Command Injection in psnode

View chart →

nrako/psnode · GHSA-m8fm-mv5w-33pv

high2021-05-06

CVE-2021-29489-Options structure open to Cross-site Scripting if passed unfiltered

View chart →

highcharts/highcharts · GHSA-8j65-4pcq-xq95

medium2021-05-06

Insecure temporary directory usage in frontend build functionality of Vaadin 14 and 15-19

View chart →

vaadin/flow · GHSA-c57f-4vp2-jqhm

high2021-05-06

CVE-2021-28966-Tempfile on Windows path traversal vulnerability

View chart →

ruby/tmpdir · GHSA-46f2-3v63-3xrp

high2021-05-05

CVE-2021-22904-Possible DoS Vulnerability in Action Controller Token Authentication

View chart →

rails/rails · GHSA-7wjx-3g7j-8584

high2021-05-04

Arbitrary code execution in ExifTool

View chart →

photostructure/exiftool-vendored.js · GHSA-4whq-r978-2x68

medium2021-05-04

CVE-2021-21264-Bypass of fix for CVE-2020-26231, Twig sandbox escape

View chart →

octobercms/october · GHSA-fcr8-6q7r-m4wg

critical2021-05-04

CVE-2020-36326-Object injection in PHPMailer/PHPMailer

View chart →

phpmailer/phpmailer · GHSA-m298-fh5c-jc66

high2021-04-30

CVE-2020-25658-Timing attacks in python-rsa

View chart →

sybrenstuvel/python-rsa · GHSA-xrx6-fmxq-rjj2

critical2021-04-30

CVE-2020-27197-libtaxii Server-Side Request Forgery vulnerability

View chart →

taxiiproject/libtaxii · GHSA-836c-xg97-8p4h

critical2021-04-30

CVE-2020-13927-Authentication bypass in Apache Airflow

View chart →

apache/airflow · GHSA-hhx9-p69v-cx2j

high2021-04-30

CVE-2020-13952-Plaintext password leak in Apache Superset

View chart →

apache/superset · GHSA-77pw-c3j2-5fc8

medium2021-04-30

CVE-2016-1000111-Forced Browsing in Twisted

View chart →

twisted/twisted · GHSA-3gqj-cmxr-p4x2