Security advisories

high2024-11-12

CVE-2024-43499-.NET Denial of Service Vulnerability

dotnet/runtime · GHSA-6x36-qxmj-rv4p

high2024-11-12

CVE-2024-52301-Laravel environment manipulation via query string

laravel/framework · GHSA-gv7v-rgg6-548h

high2024-11-12

CVE-2024-51093-Cross Site Scripting vulnerability in Snipe-IT

snipe/snipe-it · GHSA-hw9x-8m75-4vjq

high2024-11-12

CVE-2024-52010-Zoraxy has an authenticated command injection in the Web SSH feature

tobychui/zoraxy · GHSA-7hpf-g48v-hw3j

medium2024-11-12

Mimalloc Can Allocate Memory with Bad Alignment

purpleprotocol/mimalloc_rust · GHSA-g23h-7vf9-xc25

low2024-11-12

paillier-zk has ambiguous challenge derivation

lfdt-lockness/paillier-zk · GHSA-fpr5-jp2j-4q2f

low2024-11-12

cggmp21 vulnerable to ambiguous challenge derivation

lfdt-lockness/cggmp21 · GHSA-rm66-9gh4-4gp8

medium2024-11-12

`simd-json-derive` vulnerable to `MaybeUninit` misuse

simd-lite/simd-json-derive · GHSA-pqpw-89w5-82v5

low2024-11-12

cggmp21-keygen has ambiguous challenge derivation

dfns/cggmp21 · GHSA-7jjx-3qw9-j6h6

low2024-11-12

`fast-float` has multiple soundness issues

aldanor/fast-float-rust · GHSA-x8jh-xj3x-gx3c

medium2024-11-12

CVE-2024-51992-Orchid Platform has Method Exposure Vulnerability in Modals

orchidsoftware/platform · GHSA-cm46-gqf4-mv4f

medium2024-11-12

CVE-2024-50336-matrix-js-sdk has insufficient MXC URI validation which allows client-side path traversal

matrix-org/matrix-js-sdk · GHSA-xvg8-m4x3-w6xr

medium2024-11-12

CVE-2024-47535-Denial of Service attack on windows app using netty

netty/netty · GHSA-xq3w-v528-46rv

high2024-11-12

CVE-2024-43415-Decidim-Awesome has SQL injection in AdminAccountability

decidim-ice/decidim-module-decidim_awesome · GHSA-cxwf-qc32-375f

high2024-11-12

CVE-2024-43598-LightGBM Remote Code Execution Vulnerability

microsoft/lightgbm · GHSA-2586-f3p4-hq84

low2024-11-12

CVE-2024-11079-Ansible-Core vulnerable to content protections bypass

ansible/ansible · GHSA-99w6-3xph-cx78

high2024-11-11

CVE-2024-51135-powertac-server XML External Entity vulnerability

powertac/powertac-server · GHSA-pgrc-8wp5-5mvq

medium2024-11-11

CVE-2024-43439-Moodle reflected XSS via H5P error message

moodle/moodle · GHSA-hjgc-jxjc-8v9j

low2024-11-11

CVE-2024-43437-Moodle Cross-site Scripting vulnerability

moodle/moodle · GHSA-4hjf-6pxr-549h

low2024-11-11

CVE-2024-43427-Moodle admin presets export tool includes some secrets that should not be exported

moodle/moodle · GHSA-vpq5-56jj-vf2m