Security advisories

medium2024-12-28

CVE-2024-54775-Dcat-Admin Cross-Site Scripting (XSS) vulnerability

jqhph/dcat-admin · GHSA-37x3-j9jq-vrjx

high2024-12-27

CVE-2024-39025-Letta (previously MemGPT) incorrect access control vulnerability

letta-ai/letta · GHSA-7p2g-2vxc-5g55

medium2024-12-27

TunnelVision - decloaking VPNs using DHCP

m0dex/quincy · GHSA-hqmp-g7ph-x543

high2024-12-27

CVE-2024-56509-changedetection.io Vulnerable to Improper Input Validation Leading to LFR/Path Traversal

dgtlmoon/changedetection.io · GHSA-j5vv-6wjg-cfr8

high2024-12-27

CVE-2024-56522-TCPDF has incorrect comparison

tecnickcom/tcpdf · GHSA-w95c-7994-ghpr

medium2024-12-27

CVE-2024-56527-TCPDF missing character escape on error messages

tecnickcom/tcpdf · GHSA-qx95-cwh6-9mvq

medium2024-12-27

CVE-2024-56520-tecnickcom/tc-lib-pdf-font mishandles fonts

tecnickcom/tc-lib-pdf-font · GHSA-grhh-r4jj-8jh7

high2024-12-27

CVE-2024-56521-TCPDF missing certificate validation

tecnickcom/tcpdf · GHSA-9mgx-552f-59p6

medium2024-12-27

CVE-2024-56519-TCPDF lacks SVG sanitization

tecnickcom/tcpdf · GHSA-4p8j-vhjm-6pvw

medium2024-12-27

CVE-2024-9774-python-sql SQL injection vulnerability

tryton/python-sql · GHSA-pq9p-pc3p-9hm4

high2024-12-26

CVE-2024-12745-Amazon Redshift Python Connector vulnerable to SQL Injection

aws/amazon-redshift-python-driver · GHSA-8gc2-vq6m-rwjw

high2024-12-26

CVE-2024-12744-Amazon Redshift JDBC Driver vulnerable to SQL Injection

aws/amazon-redshift-jdbc-driver · GHSA-8596-2jgr-ppj7

high2024-12-26

CVE-2024-56361-lgsl Stored Cross-Site Scripting vulnerability

tltneon/lgsl · GHSA-xx95-62h6-h7v3

medium2024-12-26

CVE-2024-56510-Marp Core allows XSS by improper neutralization of HTML sanitization

marp-team/marp-core · GHSA-x52f-h5g4-8qv5

critical2024-12-25

CVE-2024-52046-Apache MINA Deserialization RCE Vulnerability

apache/mina · GHSA-76h9-2vwh-w278

critical2024-12-24

CVE-2024-43441-Apache HugeGraph-Server: Fixed JWT Token (Secret)

apache/incubator-hugegraph · GHSA-f697-gm3h-xrf9

critical2024-12-23

CVE-2024-39930-Gogs has an argument Injection in the built-in SSH server

gogs/gogs · GHSA-vm62-9jw3-c8w3

critical2024-12-23

CVE-2024-39932-Gogs allows argument injection during the previewing of changes

gogs/gogs · GHSA-9pp6-wq8c-3w2c

critical2024-12-23

CVE-2024-39931-Gogs allows deletion of internal files

gogs/gogs · GHSA-ccqv-43vm-4f3w

high2024-12-23

CVE-2024-39933-Gogs allows argument Injection when tagging new releases

gogs/gogs · GHSA-m27m-h5gj-wwmg