Security advisories

high2024-11-15

CVE-2024-49759-Stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/edituser.inc.php

librenms/librenms · GHSA-888j-pjqh-fx58

medium2024-11-15

CVE-2024-49758-LibreNMS has a stored XSS in ExamplePlugin with Device's Notes

librenms/librenms · GHSA-c86q-rj37-8f85

high2024-11-15

CVE-2024-49754-LibreNMS has a stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/api-access.inc.php

librenms/librenms · GHSA-gfwr-xqmj-j27v

medium2024-11-15

CVE-2023-0737-CSRF leading to delete account in wallabag/wallabag

wallabag/wallabag · GHSA-99w8-c5f6-96pp

medium2024-11-15

CVE-2023-0109-Stored XSS using two files in usememos/memos

usememos/memos · GHSA-5r2g-59px-3q9w

medium2024-11-15

CVE-2021-3991-Improper Authorization in dolibarr/dolibarr

dolibarr/dolibarr · GHSA-wppr-j57c-8jpm

medium2024-11-15

CVE-2021-3988-Cross-site Scripting (XSS) - DOM in janeczku/calibre-web

janeczku/calibre-web · GHSA-r735-9gc6-2hvq

medium2024-11-15

CVE-2021-3986-Generation of Error Message Containing Sensitive Information in janeczku/calibre-web

janeczku/calibre-web · GHSA-m982-h4f8-g4hf

medium2024-11-15

CVE-2021-3841-Cross site scripting in sylius/sylius

sylius/sylius · GHSA-hhvr-2q69-4563

medium2024-11-15

CVE-2021-3987-Improper Access Control in janeczku/calibre-web

janeczku/calibre-web · GHSA-fj5v-w2jp-wqvj

critical2024-11-15

CVE-2021-3838-Deserialization of Untrusted Data in dompdf/dompdf

dompdf/dompdf · GHSA-577p-7j7h-2jgf

critical2024-11-15

CVE-2021-3902-Improper Restriction of XML External Entity Reference in dompdf/dompdf

dompdf/dompdf · GHSA-3vjh-xrhf-v9xh

high2024-11-15

CVE-2024-45784-Apache Airflow: Sensitive configuration values are not masked in the logs by default

apache/airflow · GHSA-46c3-5xc5-wwhv

medium2024-11-15

CVE-2024-42499-FitNesse Path Traversal

unclebob/fitnesse · GHSA-q297-5ff8-hc92

medium2024-11-15

CVE-2024-39610-FitNesse Cross-site scripting

unclebob/fitnesse · GHSA-pg82-9w35-3w3r

medium2024-11-14

CVE-2024-52524-ReDoS in giskard's transformation.py (GHSL-2024-324)

giskard-ai/giskard · GHSA-pjwm-cr36-mwv3

medium2024-11-14

CVE-2024-4311-Missing ratelimit on passwrod resets in zenml

zenml-io/zenml · GHSA-j3vq-pmp5-r5xj

medium2024-11-14

zlib-rs stack overflow during decompression with malicious input

trifectatechfoundation/zlib-rs · GHSA-j3px-q95c-9683

high2024-11-14

CVE-2024-52308-Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer

cli/cli · GHSA-p2h2-3vg9-4p87

high2024-11-14

CVE-2024-49362-Remote Code Execution on click of <a> Link in markdown preview

laurent22/joplin · GHSA-hff8-hjwv-j9q7