Security advisories

low2025-01-13

CVE-2024-51491-notation-go has an OS error when setting CRL cache leads to denial of signature verification

notaryproject/notation-go · GHSA-qjh3-4j3h-vmwp

medium2025-01-10

CVE-2024-33298-Microweber Cross-site Scripting vulnerability

microweber/microweber · GHSA-w5g5-4jj3-8f6v

medium2025-01-10

CVE-2024-33297-Microweber Cross-site Scripting vulnerability

microweber/microweber · GHSA-j4v9-cm37-h7c2

medium2025-01-10

CVE-2024-33299-Microweber Cross-site Scripting vulnerability

microweber/microweber · GHSA-97h9-p9f8-4p3r

high2025-01-09

CVE-2024-55225-Vaultwarden vulnerable to user impersonation

dani-garcia/vaultwarden · GHSA-x7m9-mv49-fv73

low2025-01-09

CVE-2024-55226-Vaultwarden authenticated reflected cross-site scripting (XSS) vulnerability

dani-garcia/vaultwarden · GHSA-vprm-27pv-jp3w

low2025-01-09

CVE-2024-55224-Vaultwarden HTML injection vulnerability

dani-garcia/vaultwarden · GHSA-g5x8-v2ch-gj2g

medium2025-01-09

CVE-2024-13274-Drupal Open Social allows Functionality Misuse

goalgorilla/open_social · GHSA-63wg-87qv-rw4r

low2025-01-09

CVE-2025-22151-Strawberry GraphQL has type resolution vulnerability in node interface that allows potential data leakage through incorrect type resolution

strawberry-graphql/strawberry · GHSA-5xh2-23cc-5jc6

low2025-01-09

CVE-2025-22149-JWK Set's HTTP client only overwrites and appends JWK to local cache during refresh

micahparks/jwkset · GHSA-675f-rq2r-jw82

low2025-01-09

CVE-2025-22449-Mattermost Incorrect Authorization vulnerability

mattermost/mattermost · GHSA-q8fg-cp3q-5jwm

high2025-01-09

CVE-2023-1907-pgAdmin has Incorrect Default Permissions

pgadmin-org/pgadmin4 · GHSA-7w6r-748w-mh52

low2025-01-09

CVE-2025-22445-Mattermost has Improper Check for Unusual or Exceptional Conditions

mattermost/mattermost · GHSA-7rgp-4j56-fm79

medium2025-01-09

CVE-2025-20033-Mattermost Improper Validation of Specified Type of Input vulnerability

mattermost/mattermost · GHSA-2549-xh72-qrpm

low2025-01-08

CVE-2024-53995-GHSL-2024-288: SickChill open redirect in login

sickchill/sickchill · GHSA-6gf2-ffq8-gcww

medium2025-01-08

CVE-2024-53526-Composio Command Execution vulnerability

composiohq/composio · GHSA-8h93-28hg-fj84

medium2025-01-08

CVE-2025-22145-Carbon has an arbitrary file include via unvalidated input passed to Carbon::setLocale

carbonphp/carbon · GHSA-j3f9-p6hm-5w6q

medium2025-01-08

CVE-2024-55459-keras Path Traversal vulnerability

keras-team/keras · GHSA-cjgq-5qmw-rcj6

medium2025-01-08

CVE-2025-22130-Soft Serve vulnerable to path traversal attacks

charmbracelet/soft-serve · GHSA-j4jw-m6xr-fv6c

critical2025-01-08

CVE-2024-54676-Apache OpenMeetings vulnerable to Deserialization of Untrusted Data

apache/openmeetings · GHSA-mjf9-4pcv-vfg7