Security advisories

medium2024-10-22

CVE-2024-47819-Umbraco CMS vulnerable to stored Cross-site Scripting in the "dictionary name" on Dictionary section

umbraco/umbraco-cms · GHSA-c5g6-6xf7-qxp3

medium2024-10-21

CVE-2024-47825-Cilium's CIDR deny policies may not take effect when a more narrow CIDR allow is present

cilium/cilium · GHSA-3wwx-63fv-pfq6

high2024-10-21

CVE-2024-48930-secp256k1-node allows private key extraction over ECDH

cryptocoinjs/secp256k1-node · GHSA-584q-6j8j-r5pm

high2024-10-21

CVE-2024-48231-SQL injection in funadmin

funadmin/funadmin · GHSA-7pp4-388x-2xqj

high2024-10-19

CVE-2024-21536-Denial of service in http-proxy-middleware

chimurai/http-proxy-middleware · GHSA-c7qv-q95q-8v27

medium2024-10-18

CVE-2024-45526-Security Update for the OPC UA .NET Standard Stack

opcfoundation/ua-.netstandard · GHSA-7vfh-cqpc-4267

high2024-10-18

Security Update for the OPC UA .NET Standard Stack

opcfoundation/ua-.netstandard · GHSA-qm9f-c3v9-wphv

high2024-10-18

Permissive Regular Expression in tacquito

facebookincubator/tacquito · GHSA-p5wf-cmr4-xrwr

critical2024-10-18

CVE-2024-9264-Grafana Command Injection And Local File Inclusion Via Sql Expressions

grafana/grafana · GHSA-q99m-qcv4-fpm7

medium2024-10-18

CVE-2024-38820-Spring Framework DataBinder Case Sensitive Match Exception

spring-projects/spring-framework · GHSA-4gc7-5j7h-4qph

medium2024-10-17

CVE-2024-48924-MessagePack allows untrusted data to lead to DoS attack due to hash collisions and stack overflow

messagepack-csharp/messagepack-csharp · GHSA-4qm4-8hg2-g2xm

medium2024-10-17

CVE-2024-10073-Flair allows arbitrary code execution

flairnlp/flair · GHSA-9rw2-jf8x-cgwm

medium2024-10-17

CVE-2024-25112-Exiv2 has a denial of service due to unbounded recursion in QuickTimeVideo::multipleEntriesDecoder

exiv2/exiv2 · GHSA-crmj-qh74-2r36

medium2024-10-17

CVE-2024-24826-Exiv2 has an out-of-bounds read in QuickTimeVideo::NikonTagsDecoder

exiv2/exiv2 · GHSA-g9xm-7538-mq8w

medium2024-10-17

CVE-2024-49580-JetBrains Ktor information disclosure

ktorio/ktor · GHSA-8qv4-773j-c979

medium2024-10-16

CVE-2024-46212-Path traversal in redaxo

redaxo/redaxo · GHSA-37gm-h5wr-pf25

low2024-10-16

CVE-2024-47836-Admidio Vulnerable to HTML Injection In The Messages Section

admidio/admidio · GHSA-7c4c-749j-pfp2

medium2024-10-15

CVE-2024-47889-Possible ReDoS vulnerability in block_format in Action Mailer

rails/rails · GHSA-h47h-mwp9-c6q6

medium2024-10-15

CVE-2024-47888-Possible ReDoS vulnerability in plain_text_for_blockquote_node in Action Text

rails/rails · GHSA-wwhv-wxv9-rpgw

medium2024-10-15

CVE-2024-47887-Possible ReDoS vulnerability in HTTP Token authentication in Action Controller

rails/rails · GHSA-vfg9-r3fq-jvx4