Security advisories

medium2024-10-26

CVE-2020-26308-validate.js Regular Expression Denial of Service vulnerability

ansman/validate.js · GHSA-rv73-9c8w-jp4c

medium2024-10-26

CVE-2020-26305-CommonRegexJS Regular Expression Denial of Service vulnerability

talyssonoc/commonregexjs · GHSA-pmvv-57rg-5g86

medium2024-10-26

CVE-2020-26304-Foundation Regular Expression Denial of Service vulnerability

foundation/foundation-sites · GHSA-p8pc-3f7w-jr5q

medium2024-10-26

CVE-2020-26306-Knwl.js Regular Expression Denial of Service vulnerability

benhmoore/knwl · GHSA-68qg-g787-3rp5

medium2024-10-26

CVE-2020-26309-nope-validator Regular Expression Denial of Service vulnerability

ftonato/nope-validator · GHSA-3phv-83cj-p8p7

low2024-10-26

CVE-2024-48228-Funadmin Cross-site Scripting vulnerability

funadmin/funadmin · GHSA-j9wp-x5q5-xh2f

high2024-10-25

CVE-2024-48229-SQL injection in funadmin

funadmin/funadmin · GHSA-h345-r48x-g68f

high2024-10-25

CVE-2024-48230-SQL injection in funadmin

funadmin/funadmin · GHSA-2mv8-jjm5-f3hr

high2024-10-25

CVE-2024-48223-SQL injection in funadmin

funadmin/funadmin · GHSA-x2fr-vj74-5h35

high2024-10-25

CVE-2024-48225-SQL injection in funadmin

funadmin/funadmin · GHSA-vw6x-c5rg-jmjp

high2024-10-25

CVE-2024-48227-Logic flaw in Funadmin

funadmin/funadmin · GHSA-r9v5-q97m-rj5g

high2024-10-25

CVE-2024-48218-SQL injection in funadmin

funadmin/funadmin · GHSA-h4px-9vmp-p7pv

high2024-10-25

CVE-2024-48226-SQL injection in funadmin

funadmin/funadmin · GHSA-9gw3-qr2f-3vg5

high2024-10-25

CVE-2024-48224-SQL injection in funadmin

funadmin/funadmin · GHSA-6j8f-88mh-r9vq

high2024-10-25

CVE-2024-48222-SQL injection in funadmin

funadmin/funadmin · GHSA-5g66-93qv-565j

medium2024-10-25

CVE-2024-49767-Werkzeug possible resource exhaustion when parsing file data in forms

pallets/werkzeug · GHSA-q34m-jh98-gwm2

medium2024-10-25

CVE-2024-49766-Werkzeug safe_join not safe on Windows

pallets/werkzeug · GHSA-f9vj-2wh5-fj8j

critical2024-10-25

github.com/crossplane/crossplane: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses

crossplane/crossplane · GHSA-7h65-4p22-39j6

critical2024-10-25

RKE2 allows privilege escalation in Windows nodes due to Insecure Access Control Lists

rancher/rke2 · GHSA-x7xj-jvwp-97rv

critical2024-10-25

CVE-2024-22036-Rancher Remote Code Execution via Cluster/Node Drivers

rancher/rancher · GHSA-h99m-6755-rgwc