Security advisories

high2024-10-31

CVE-2024-51478-YesWiki Uses a Broken or Risky Cryptographic Algorithm

yeswiki/yeswiki · GHSA-4fvx-h823-38v3

high2024-10-31

CVE-2024-42835-langflow has vulnerability in PythonCodeTool component

langflow-ai/langflow · GHSA-56m6-4mhw-h3g5

critical2024-10-31

CVE-2024-48910-DOMPurify vulnerable to tampering by prototype polution

cure53/dompurify · GHSA-p3vf-v8qc-cwcr

high2024-10-31

CVE-2024-43383-Apache Lucene.Net.Replicator Deserialization of Untrusted Data vulnerability

apache/lucenenet · GHSA-2qw8-ppr5-m96c

high2024-10-31

CVE-2024-21537-lilconfig Code Injection vulnerability

antonk52/lilconfig · GHSA-fq9m-v26v-2m4f

high2024-10-31

CVE-2024-48307-JeecgBoot SQL Injection vulnerability

jeecgboot/jeecgboot · GHSA-mcw3-h5xg-r95m

high2024-10-31

CVE-2024-10005-Hashicorp Consul Path Traversal vulnerability

hashicorp/consul · GHSA-chgm-7r52-whjj

medium2024-10-31

CVE-2024-10086-Hashicorp Consul Cross-site Scripting vulnerability

hashicorp/consul · GHSA-99wr-c2px-grmh

medium2024-10-31

CVE-2024-10006-Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability

hashicorp/consul · GHSA-5c4w-8hhh-3c3h

high2024-10-30

CVE-2024-48112-ThinkPHP deserialization vulnerability

top-think/think · GHSA-pjhx-j53p-c5f5

medium2024-10-30

CVE-2024-50353-ICG.AspNetCore.Utilities.CloudStorage's Secure Token Durations Different Than Expected

iowacomputergurus/aspnetcore.utilities.cloudstorage · GHSA-24mc-gc52-47jv

medium2024-10-30

CVE-2024-43382-Snowflake JDBC Security Advisory

snowflakedb/snowflake-jdbc · GHSA-f686-hw9c-xw9c

medium2024-10-29

CVE-2024-0133-NVIDIA Container Toolkit allows specially crafted container image to create empty files on the host file system

nvidia/nvidia-container-toolkit · GHSA-f748-7hpg-88ch

critical2024-10-29

CVE-2024-0132-NVIDIA Container Toolkit contains a Time-of-check Time-of-Use (TOCTOU) vulnerability

nvidia/nvidia-container-toolkit · GHSA-mjjw-553x-87pq

medium2024-10-29

CVE-2024-10491-Express ressource injection

expressjs/express · GHSA-cm5g-3pgc-8rg4

low2024-10-29

CVE-2024-10452-Grafana org admin can delete pending invites in different org

grafana/grafana · GHSA-66c4-2g2v-54qw

medium2024-10-29

sp1-recursion-gnark-ffi has insufficient range checks of BabyBear arithmetic

succinctlabs/sp1 · GHSA-f77q-r5qm-w4m8

medium2024-10-29

CVE-2024-7774-Langchain Path Traversal vulnerability

langchain-ai/langchainjs · GHSA-hc5w-c9f8-9cc4

medium2024-10-29

CVE-2024-6581-Lollms vulnerable to Cross-site Scripting

parisneo/lollms · GHSA-cm59-8rmv-f2cj

low2024-10-29

CVE-2024-7042-@langchain/community SQL Injection vulnerability

langchain-ai/langchainjs · GHSA-6m59-8fmv-m5f9