Security advisories

medium2024-11-22

SurrealDB has an Uncaught Exception Sorting Tables by Random Order

surrealdb/surrealdb · GHSA-m52v-24p8-654f

medium2024-11-22

CVE-2024-58358-SurrealDB has an Uncaught Exception Handling Nonexistent Role

surrealdb/surrealdb · GHSA-jc55-246c-r88f

medium2024-11-22

SurrealDB has an Uncaught Exception in Function Generating Random Time

surrealdb/surrealdb · GHSA-h4f5-h82v-5w4r

medium2024-11-21

CVE-2024-52309-SFTPGo allows administrators to restrict command execution from the EventManager

drakkan/sftpgo · GHSA-49cc-xrjf-9qf7

high2024-11-21

CVE-2023-40017-GeoNode Server Side Request forgery

geonode/geonode · GHSA-rmxg-6qqf-x8mr

high2024-11-21

CVE-2024-58351-Flowise OverrideConfig security vulnerability

flowiseai/flowise · GHSA-5cph-wvm9-45gj

high2024-11-21

CVE-2024-52803-LLama Factory Remote OS Command Injection Vulnerability

hiyouga/llama-factory · GHSA-hj3w-wrh4-44vp

medium2024-11-20

CVE-2024-52797-Searching Opencast may cause a denial of service

opencast/opencast · GHSA-jh6x-7xfg-9cq2

high2024-11-20

CVE-2024-52581-Litestar allows unbounded resource consumption (DoS vulnerability)

litestar-org/litestar · GHSA-gjcc-jvgw-wvwj

medium2024-11-20

cert-manager ha a potential slowdown / DoS when parsing specially crafted PEM inputs

cert-manager/cert-manager · GHSA-r4pg-vg54-wxx4

medium2024-11-20

CVE-2024-52282-Rancher Helm Applications may have sensitive values leaked

rancher/rancher · GHSA-9c5p-35gj-jqp4

low2024-11-20

CVE-2024-52796-Password Pusher rate limiter can be bypassed by forging proxy headers

pglombardo/passwordpusher · GHSA-ffp2-8p2h-4m5j

high2024-11-20

ASA-2024-010: cosmossdk.io/math: Mismatched bit-length validation in sdk.Int and sdk.Dec can lead to panic

cosmos/cosmos-sdk · GHSA-7225-m954-23v7

high2024-11-20

CVE-2024-52280- github.com/rancher/steve's users can issue watch commands for arbitrary resources

rancher/steve · GHSA-j5hq-5jcr-xwx7

medium2024-11-20

CVE-2024-45691-Moodle Lesson activity password bypass through PHP loose comparison

moodle/moodle · GHSA-xfv7-h2qg-rjm7

medium2024-11-20

CVE-2024-11406-django CMS Attributes Field Cross-site Scripting

django-cms/djangocms-attributes-field · GHSA-vxcv-4xvf-pc22

medium2024-11-20

CVE-2024-48899-Moodle IDOR when accessing list of course badges

moodle/moodle · GHSA-r4xr-m393-778m

medium2024-11-20

CVE-2024-45689-Moodle allows users to retrieve information they did not have permission to access

moodle/moodle · GHSA-j822-x5gg-5r56

medium2024-11-20

CVE-2024-11404-Django Filer Unrestricted Upload of File with Dangerous Type

django-cms/django-filer · GHSA-j4v3-wwwx-5gqv

medium2024-11-20

CVE-2024-45690-Moodle IDOR when deleting OAuth2 linked accounts

moodle/moodle · GHSA-fhg2-r2h9-h7q8