Security advisories

low2024-11-11

CVE-2024-43433-Moodle's user/power level management inconsistent with suspended users

moodle/moodle · GHSA-q99x-mjmh-v8w7

low2024-11-11

CVE-2024-43430-Moodle has insufficient access control

moodle/moodle · GHSA-jpf2-9ppp-2c49

low2024-11-11

CVE-2024-43429-Moodle has user information visibility control issues in gradebook reports

moodle/moodle · GHSA-c767-4whh-v7rw

low2024-11-11

CVE-2024-43432-Moodle authorization headers preserved between "emulated redirects"

moodle/moodle · GHSA-7wmp-2xmx-g6h8

low2024-11-11

CVE-2024-43435-Moodle has insufficient capability checks

moodle/moodle · GHSA-4gq2-x5w4-7hp8

high2024-11-09

CVE-2024-27528-pywasm3 has an Invalid Memory Read, Leading to DoS and Potential Code Execution

wasm3/pywasm3 · GHSA-mhg9-mm8c-c683

high2024-11-09

CVE-2024-27530-pywasm3 contains a Use-After-Free in ForEachModule

wasm3/pywasm3 · GHSA-46r6-92jg-22jg

high2024-11-08

CVE-2024-52009-Git credentials are exposed in Atlantis logs

runatlantis/atlantis · GHSA-gppm-hq3p-h4rp

high2024-11-08

CVE-2024-52007-XXE vulnerability in XSLT parsing in `org.hl7.fhir.core`

hapifhir/org.hl7.fhir.core · GHSA-gr3c-q7xf-47vh

low2024-11-08

sp1 has insufficient observation of cumulative sum

succinctlabs/sp1 · GHSA-8m24-3cfx-9fjw

low2024-11-08

CVE-2024-50378-Apache Airflow vulnerable to Insertion of Sensitive Information Into Sent Data

apache/airflow · GHSA-j857-2pwm-jjmm

high2024-11-08

CVE-2024-21538-Regular Expression Denial of Service (ReDoS) in cross-spawn

moxystudio/node-cross-spawn · GHSA-3xgq-45jj-v275

medium2024-11-08

CVE-2024-51434-Froala WYSIWYG editor allows cross-site scripting (XSS)

froala/wysiwyg-editor · GHSA-549p-5c7f-c5p4

high2024-11-07

CVE-2024-51998-changedetection.io path traversal using file URI scheme without supplying hostname

dgtlmoon/changedetection.io · GHSA-6jrf-rcjf-245r

medium2024-11-07

CVE-2024-51987-HTTP Client uses incorrect token after refresh

duendesoftware/duende.accesstokenmanagement · GHSA-7mr7-4f54-vcx5

high2024-11-07

CVE-2024-47072-XStream is vulnerable to a Denial of Service attack due to stack overflow from a manipulated binary input stream

x-stream/xstream · GHSA-hfq9-hggm-c56q

medium2024-11-07

CVE-2024-10975-Hashicorp Nomad Incorrect Authorization vulnerability

hashicorp/nomad · GHSA-2w5v-x29g-jw7j

high2024-11-07

CVE-2015-3542-PHPExcel XXE Vulnerability

phpoffice/phpexcel · GHSA-3m9x-2qfj-xvq4

high2024-11-07

CVE-2024-45794-Devtron has SQL Injection in CreateUser API

devtron-labs/devtron · GHSA-q78v-cv36-8fxj

critical2024-11-07

CVE-2024-51990-jj vulnerable to path traversal via crafted Git repositories

martinvonz/jj · GHSA-88h5-6w7m-5w56