Security advisories

low2024-09-26

CVE-2024-47197-Maven Archetype Plugin: Maven Archetype integration-test may package local settings into the published artifact, possibly containing credentials

apache/maven-archetype · GHSA-2qq7-fch2-phqf

medium2024-09-25

Camaleon CMS vulnerable to stored XSS through user file upload (GHSL-2024-184)

owen2345/camaleon-cms · GHSA-75j2-9gmc-m855

critical2024-09-25

CVE-2024-1728-Gradio allows users to access arbitrary files

gradio-app/gradio · GHSA-m842-4qm8-7gpq

high2024-09-25

CVE-2024-46488-Heap-based Buffer Overflow in sqlite-vec

asg017/sqlite-vec · GHSA-vrcx-gx3g-j3h8

medium2024-09-25

CVE-2024-8996-Grafana Agent (Flow mode) on Windows has Unquoted Search Path or Element vulnerability

grafana/agent · GHSA-m5gv-m5f9-wgv4

high2024-09-25

CVE-2024-46489-Remote command execution in promptr

ferrislucas/promptr · GHSA-hwxp-6qf7-q3rc

medium2024-09-25

CVE-2024-8975-Grafana Alloy on Windows has Unquoted Search Path or Element vulnerability

grafana/alloy · GHSA-chqx-36rm-rf8h

medium2024-09-25

CVE-2024-47082-Cross-Site Request Forgery (CSRF) in strawberry-graphql

strawberry-graphql/strawberry · GHSA-79gp-q4wv-33fr

medium2024-09-25

CVE-2024-45613-Cross-site scripting (XSS) in the clipboard package

ckeditor/ckeditor5 · GHSA-rgg8-g5x8-wr9v

low2024-09-25

CVE-2024-23454-Apache Hadoop: Temporary File Local Information Disclosure

apache/hadoop · GHSA-f5fw-25gw-5m92

medium2024-09-25

CVE-2024-40761-Apache Answer: Avatar URL leaked user email addresses

apache/incubator-answer · GHSA-48cr-j2cx-mcr8

medium2024-09-25

CVE-2024-7398-Cross site scripting in Concrete CMS

concretecms/concretecms · GHSA-x8h2-255q-jg4x

medium2024-09-25

CVE-2024-8291-Cross site scripting in Concrete CMS

concretecms/concretecms · GHSA-q7qr-22qw-pqgx

medium2024-09-25

CVE-2024-9148-Flowise and Flowise Chat Embed vulnerable to Stored Cross-site Scripting

flowiseai/flowisechatembed · GHSA-m5p9-xvxj-64c8

medium2024-09-25

CVE-2024-46935-Denial of service in rocket chat message parser

rocketchat/fuselage · GHSA-6375-pg5j-8wph

high2024-09-25

CVE-2024-39928-Apache Linkis Spark EngineConn: Commons Lang's RandomStringUtils Random string security vulnerability

apache/linkis · GHSA-6gch-63wp-4v5f

medium2024-09-24

CVE-2024-38809-Spring Framework DoS via conditional HTTP request

spring-projects/spring-framework · GHSA-2rmj-mq67-h97g

high2024-09-23

CVE-2024-47068-DOM Clobbering Gadget found in rollup bundled scripts that leads to XSS

rollup/rollup · GHSA-gcx4-mw62-g8wm

medium2024-09-23

Camaleon CMS vulnerable to stored XSS through user file upload (GHSL-2024-184)

owen2345/camaleon-cms · GHSA-8fx8-3rg2-79xw

medium2024-09-23

Ouch! allows a segmentation fault due to use of uninitialized memory

ouch-org/ouch · GHSA-2wq5-g96f-mv3v