Security advisories

medium2024-11-05

CVE-2024-48061-Langflow vulnerable to remote code execution

langflow-ai/langflow · GHSA-5p5r-57fx-pmfr

medium2024-11-05

CVE-2024-48052-gradio Server Side Request Forgery vulnerability

gradio-app/gradio · GHSA-3gf9-wv65-gwh9

medium2024-11-04

CVE-2024-51734-Access control vulnerable to user data deletion by anonynmous users

zopefoundation/accesscontrol · GHSA-g5vw-3h65-2q3v

critical2024-11-04

CVE-2024-51501-CRLF injection in Refit's [Header], [HeaderCollection] and [Authorize] attributes

reactiveui/refit · GHSA-3hxg-fxwm-8gf7

high2024-11-04

Reposilite vulnerable to path traversal while serving javadoc expanded files (arbitrary file read) (`GHSL-2024-074`)

dzikoysk/reposilite · GHSA-82j3-hf72-7x93

low2024-11-04

CVE-2024-51744-Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations

golang-jwt/jwt · GHSA-29wx-vh33-7x7r

medium2024-11-04

CVE-2024-51502-loona-hpack Panic Vulnerability

bearcove/loona · GHSA-7vm6-qwh5-9x44

high2024-11-04

CVE-2024-51127-hornetq vulnerable to file overwrite, sensitive information disclosure

darranl/hornetq · GHSA-r7mv-mv7m-pjw3

medium2024-11-04

CVE-2024-10389-Safearchive Path Traversal vulnerability

google/safearchive · GHSA-q3rp-vvm7-j8jg

high2024-11-04

CVE-2024-23590-Apache Kylin Session Fixation vulnerability

apache/kylin · GHSA-752q-72qc-rc66

medium2024-11-01

CVE-2024-51483-changedetection.io Path Traversal

dgtlmoon/changedetection.io · GHSA-cwgg-57xj-g77r

high2024-11-01

CVE-2024-49770-Path traversal in oak allows transfer of hidden files within the served root directory

oakserver/oak · GHSA-qm92-93fv-vh7m

medium2024-11-01

CVE-2024-21510-Sinatra vulnerable to Reliance on Untrusted Inputs in a Security Decision

sinatra/sinatra · GHSA-hxx2-7vcw-mqr3

high2024-10-31

CVE-2024-49381-Plenti arbitrary file deletion vulnerability

plentico/plenti · GHSA-6h8w-hrfp-pffx

high2024-10-31

CVE-2024-49380-Plenti arbitrary file write vulnerability

plentico/plenti · GHSA-2p96-p7qh-4rgr

medium2024-10-31

CVE-2024-42515-Glossarizer Cross-site Scripting vulnerability

pebbleroad/glossarizer · GHSA-hhhv-ggjx-q9j2

high2024-10-31

CVE-2024-39720-Ollama Out-of-bounds Read

ollama/ollama · GHSA-95j2-w8x7-hm88

medium2024-10-31

CVE-2024-50354-Gnark out-of-memory during deserialization with crafted inputs

consensys/gnark · GHSA-cph5-3pgr-c82g

high2024-10-31

CVE-2024-8185-Hashicorp Vault vulnerable to denial of service through memory exhaustion

hashicorp/vault · GHSA-g233-2p4r-3q7v

high2024-10-31

CVE-2024-50347-Laravel Reverb Missing API Signature Verification

laravel/reverb · GHSA-pfrr-xvrf-pxjx