Security advisories

medium2024-10-09

CVE-2024-7037-open-webui allows writing and deleting arbitrary files

open-webui/open-webui · GHSA-54f4-v6v9-9q82

low2024-10-09

CVE-2024-47813-Wasmtime race condition could lead to WebAssembly control-flow integrity and type safety violations

bytecodealliance/wasmtime · GHSA-7qmx-3fpx-r45m

medium2024-10-09

CVE-2024-47763-wasmtime has a runtime crash when combining tail calls with trapping imports

bytecodealliance/wasmtime · GHSA-q8hx-mm92-4wvg

medium2024-10-09

CVE-2024-9675-Buildah allows arbitrary directory mount

containers/buildah · GHSA-586p-749j-fhwp

medium2024-10-09

Databento Binary Encoding (DBN) has a heap buffer overflow using c_chars_to_str function

databento/dbn · GHSA-pfr9-2p92-qrhq

medium2024-10-09

CVE-2024-28168-Apache XML Graphics FOP XML External Entity Reference ('XXE') vulnerability

apache/xmlgraphics-fop · GHSA-jqfv-jrvq-95jm

high2024-10-08

CVE-2024-58367-SurrealDB: Improper Authorization in Select Permissions

surrealdb/surrealdb · GHSA-9722-9j67-vjcr

high2024-10-08

SurrealDB has an Uncaught Exception Handling Parsing Errors on Empty Strings

surrealdb/surrealdb · GHSA-qjrv-v6qp-x99x

high2024-10-08

CVE-2024-47823-Livewire Remote Code Execution on File Uploads

livewire/livewire · GHSA-f3cx-396f-7jqp

low2024-10-08

CVE-2024-34537-Denial of Service in TYPO3 Bookmark Toolbar

typo3-cms/backend · GHSA-ffcv-v6pw-qhrp

high2024-10-08

CVE-2024-36814-Adguard Home arbitrary file read vulnerability

adguardteam/adguardhome · GHSA-9cp9-8gw2-8v7m

high2024-10-08

CVE-2024-43485-Microsoft Security Advisory CVE-2024-43485 | .NET Denial of Service Vulnerability

dotnet/runtime · GHSA-8g4q-xg66-9fp4

high2024-10-08

CVE-2024-43484-Microsoft Security Advisory CVE-2024-43484 | .NET Denial of Service Vulnerability

dotnet/runtime · GHSA-f32c-w444-8ppv

high2024-10-08

CVE-2024-43483-Microsoft Security Advisory CVE-2024-43483 | .NET Denial of Service Vulnerability

dotnet/runtime · GHSA-qj66-m88j-hmgj

high2024-10-08

CVE-2024-43497-DeepSpeed Remote Code Execution Vulnerability

microsoft/deepspeed · GHSA-8cp5-3rf8-8gfh

medium2024-10-08

CVE-2024-9621-Quarkus CXF logs passwords and other secrets

quarkiverse/quarkus-cxf · GHSA-jqh2-ch7p-xwxh

medium2024-10-08

CVE-2024-25885-xhtml2pdf Denial of Service via crafted string

xhtml2pdf/xhtml2pdf · GHSA-jj5c-hhrg-vv5h

medium2024-10-08

CVE-2024-9622-HTTP Request Smuggling Leading to Client Timeouts in resteasy-netty4

resteasy/resteasy · GHSA-5wpr-cj9p-959r

medium2024-10-08

CVE-2024-45231-Django allows enumeration of user e-mail addresses

django/django · GHSA-rrqc-c2jx-6jgv

medium2024-10-08

CVE-2024-45230-Django vulnerable to denial-of-service attack via the urlize() and urlizetrunc() template filters

django/django · GHSA-5hgc-2vfp-mqvc