Security advisories

medium2024-11-25

CVE-2024-10492-Keycloak Path Traversal Vulnerability Due to External Control of File Name or Path

keycloak/keycloak · GHSA-5545-r4hg-rj4m

high2024-11-25

CVE-2024-27134-MLflow's excessive directory permissions allow local privilege escalation

mlflow/mlflow · GHSA-qpgc-w4mg-6v92

medium2024-11-25

CVE-2024-52787-libre-chat Path Traversal vulnerability

vemonet/libre-chat · GHSA-3864-rp2m-2qfj

high2024-11-25

CVE-2024-10270-org.keycloak:keycloak-services has Inefficient Regular Expression Complexity

keycloak/keycloak · GHSA-wq8x-cg39-8mrr

medium2024-11-25

rustls network-reachable panic in `Acceptor::accept`

rustls/rustls · GHSA-qg5g-gv98-5ffh

low2024-11-25

CVE-2024-53261-@sveltejs/kit vulnerable to XSS on dev mode 404 page

sveltejs/kit · GHSA-rjjv-87mx-6x3h

low2024-11-25

CVE-2024-53262-@sveltejs/kit has unescaped error message included on error page

sveltejs/kit · GHSA-mh2x-fcqh-fmqv

high2024-11-25

Artifact poisoning vulnerability in action-download-artifact v5 and earlier

dawidd6/action-download-artifact · GHSA-5xr6-xhww-33m4

high2024-11-25

Taurus multi-party-sig has OT-based ECDSA protocol implementation flaws

taurushq-io/multi-party-sig · GHSA-7f6p-phw2-8253

medium2024-11-25

CVE-2024-6538-OpenShift Console Server Side Request Forgery vulnerability

openshift/console · GHSA-v3w7-g6p2-mpx7

medium2024-11-25

CVE-2024-53916-OpenStack Neutron can use an incorrect ID during policy enforcement

openstack/neutron · GHSA-f27h-g923-68hw

high2024-11-24

CVE-2024-53899-virtualenv allows command injection through activation scripts for a virtual environment

pypa/virtualenv · GHSA-rqc4-2hc7-8c8v

high2024-11-23

CVE-2024-11393-Deserialization of Untrusted Data in Hugging Face Transformers

huggingface/transformers · GHSA-wrfc-pvp9-mr9g

high2024-11-23

CVE-2024-11392-Deserialization of Untrusted Data in Hugging Face Transformers

huggingface/transformers · GHSA-qxrp-vhvm-j765

high2024-11-23

CVE-2024-11394-Deserialization of Untrusted Data in Hugging Face Transformers

huggingface/transformers · GHSA-hxxf-235m-72v3

high2024-11-22

CVE-2024-10220- Kubernetes kubelet arbitrary command execution

kubernetes/kubernetes · GHSA-27wf-5967-98gx

low2024-11-22

CVE-2024-45719-Apache Answer: Predictable Authorization Token Using UUIDv1

apache/incubator-answer · GHSA-mr95-vfcf-fx9p

medium2024-11-22

smol-toml has a Denial of Service via malicious TOML document using deeply nested inline tables

squirrelchat/smol-toml · GHSA-pqhp-25j4-6hq9

medium2024-11-22

CVE-2024-53253-Sentry improper error handling leaks Application Integration Client Secret

getsentry/sentry · GHSA-v5h2-q2w4-gpcx

high2024-11-22

CVE-2024-52804-Tornado has an HTTP cookie parsing DoS vulnerability

tornadoweb/tornado · GHSA-8w49-h785-mj3c