Security advisories

medium2024-12-18

CVE-2024-21548-Bun has an Application-level Prototype Pollution vulnerability in the runtime native API for Glo

oven-sh/bun · GHSA-v9mx-4pqq-h232

high2024-12-18

CVE-2024-21547-Spatie Browsershot Directory Traversal vulnerability

spatie/browsershot · GHSA-v528-6rq9-h6gw

high2024-12-18

CVE-2024-21546-UniSharp Laravel Filemanager Code Injection vulnerability

unisharp/laravel-filemanager · GHSA-6569-3785-r3v6

medium2024-12-18

CVE-2023-37940-Liferay Portal and Liferay DXP have Cross-site Scripting vulnerability in edit Service Access Policy page

liferay/liferay-portal · GHSA-px38-239g-x5mg

high2024-12-18

CVE-2024-9779-Open Cluster Management vulnerable to Trust Boundary Violation

open-cluster-management-io/ocm · GHSA-jhh6-6fhp-q2xp

medium2024-12-17

CVE-2024-56142-PGHoard Path Traversal vulnerability

aiven-open/pghoard · GHSA-m9hc-vxjj-4x6q

high2024-12-17

CVE-2024-49194-Databricks JDBC Driver Command Injection vulnerability

databricks/databricks-jdbc · GHSA-jxw2-jvxf-5vrp

medium2024-12-17

CVE-2024-12539-Elasticsearch Incorrect Authorization vulnerability

elastic/elasticsearch · GHSA-5mpw-4546-2wcr

medium2024-12-17

CVE-2024-11993-Liferay Portal and Liferay DXP vulnerable to Cross-site Scripting

liferay/liferay-portal · GHSA-4hxr-28mv-q729

medium2024-12-17

CVE-2024-54677-Apache Tomcat Uncontrolled Resource Consumption vulnerability

apache/tomcat · GHSA-653p-vg55-5652

high2024-12-17

CVE-2024-50379-Apache Tomcat Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability

apache/tomcat · GHSA-5j33-cvvr-w245

medium2024-12-17

Traefik affected by CVE-2024-53259

traefik/traefik · GHSA-hxr6-2p24-hf98

high2024-12-17

CVE-2024-51479-Next.js authorization bypass vulnerability

vercel/next.js · GHSA-7gfc-8cq8-jh5f

medium2024-12-16

CVE-2024-35230-Welcome and About GeoServer pages communicate version and revision information

geoserver/geoserver · GHSA-6pfc-w86r-54q6

high2024-12-16

ASA-2024-0012, ASA-2024-0013: CosmosSDK: Transaction decoding may result in a stack overflow or resource exhaustion

cosmos/cosmos-sdk · GHSA-8wcc-m6j2-qxvm

low2024-12-16

CVE-2024-58356-SurrealDB has Silent Failure to Overwrite Table Definition of Relation Type

surrealdb/surrealdb · GHSA-27vq-hv74-7cqp

high2024-12-16

CVE-2024-55949-MinIO vulnerable to privilege escalation in IAM import API

minio/minio · GHSA-cwq8-g58r-32hg

medium2024-12-16

CVE-2024-54682-Mattermost Data Amplification vulnerability

mattermost/mattermost · GHSA-v647-h8jj-fw5r

medium2024-12-16

CVE-2024-48872-Mattermost Race Condition vulnerability

mattermost/mattermost · GHSA-826h-p4c3-477p

medium2024-12-16

CVE-2024-54083-Mattermost Improper Validation of Specified Type of Input vulnerability

mattermost/mattermost · GHSA-69pr-78gv-7c6h