Security advisories

medium2024-12-23

Unsoundness in `Iterator` and `DoubleEndedIterator` impls for `glib::VariantStrIter`

gtk-rs/gtk-rs-core · GHSA-wrw7-89jp-8q8g

high2024-12-23

CVE-2024-56362-Navidrome Stores JWT Secret in Plaintext in navidrome.db

navidrome/navidrome · GHSA-xwx7-p63r-2rj8

medium2024-12-23

Cross Site Scripting (XSS) vulnerability while uploading content to a new deployment

hal/console · GHSA-64gp-r758-8pfm

medium2024-12-23

Unsound usages of `u8` type casting in spl-token-swap

solana-labs/solana-program-library · GHSA-h6xm-c6r4-vmwf

medium2024-12-23

libafl has unsound usages of `core::slice::from_raw_parts_mut`

aflplusplus/libafl · GHSA-f7qj-v3vp-4856

medium2024-12-23

Undefined behaviour in `kvm_ioctls::ioctls::vm::VmFd::create_device`

rust-vmm/kvm-ioctls · GHSA-3qx8-rv27-j6gp

high2024-12-23

CVE-2024-45387-SQL injection in Apache Traffic Control

apache/trafficcontrol · GHSA-vq94-9pfv-ccqr

medium2024-12-23

CVE-2024-56364-Cross-site Scripting vulnerability in SimpleXLSXEx::readThemeColors, SimpleXLSXEx::getColorValue and SimpleXLSX::toHTMLEx

shuchkin/simplexlsx · GHSA-r87q-fj25-f8jf

medium2024-12-23

CVE-2024-56326-Jinja has a sandbox breakout through indirect reference to format method

pallets/jinja · GHSA-q2x7-8rv6-6q7h

medium2024-12-23

CVE-2024-56201-Jinja has a sandbox breakout through malicious filenames

pallets/jinja · GHSA-gmj6-6f8f-6699

high2024-12-23

CVE-2024-55947-Path Traversal in file update API in gogs

gogs/gogs · GHSA-qf5v-rp47-55gg

high2024-12-23

CVE-2024-54148-Remote Command Execution in file editing in gogs

gogs/gogs · GHSA-r7j8-5h9c-f6fx

medium2024-12-20

CVE-2024-55341-Piranha CMS Cross-site Scripting vulnerability

piranhacms/piranha.core · GHSA-mmx8-vrfg-hfmq

medium2024-12-20

CVE-2024-55342-Piranha CMS Cross-site Scripting vulnerability

piranhacms/piranha.core · GHSA-cmwp-442x-3rcv

high2024-12-20

CVE-2024-56334-Systeminformation has command injection vulnerability in getWindowsIEEE8021x (SSID)

sebhildebrandt/systeminformation · GHSA-cvv5-9h9w-qp2m

medium2024-12-20

CVE-2024-55471-Oqtane Framework Insecure Direct Object Reference vulnerability

oqtane/oqtane.framework · GHSA-hhcw-wwxv-g95c

high2024-12-20

CVE-2024-55470-Oqtane Framework Incorrect Access Control vulnerability

oqtane/oqtane.framework · GHSA-995c-qww8-64fj

low2024-12-20

CVE-2024-55186-Oqtane Framework Insecure Direct Object Reference vulnerability

oqtane/oqtane.framework · GHSA-2hr5-cvwp-jr5w

high2024-12-20

CVE-2024-56337-Apache Tomcat Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability

apache/tomcat · GHSA-27hp-xhwr-wr2m

critical2024-12-20

CVE-2024-28892-GoCast OS Command Injection vulnerability

mayuresh82/gocast · GHSA-5qww-56gc-f66c