Security advisories

critical2024-09-19

CVE-2024-46946-LangChain Experimental Eval Injection vulnerability

langchain-ai/langchain · GHSA-p2qj-r53j-h3xj

medium2024-09-18

CVE-2024-47059-Mautic allows users enumeration due to weak password login

mautic/mautic · GHSA-8vff-35qm-qjvv

medium2024-09-18

CVE-2022-25770-Mautic has insufficient authentication in upgrade flow

mautic/mautic · GHSA-qf6m-6m4g-rmrc

medium2024-09-18

CVE-2021-27917-Mautic has an XSS in contact tracking and page hits report

mautic/mautic · GHSA-xpc5-rr39-v8v2

medium2024-09-18

CVE-2024-47050-Mautic vulnerable to XSS in contact/company tracking (no authentication)

mautic/mautic · GHSA-73gr-32wg-qhh7

medium2024-09-18

CVE-2024-47058-Mautic vulnerable to Cross-site Scripting (XSS) - stored (edit form HTML field)

mautic/mautic · GHSA-xv68-rrmw-9xwf

medium2024-09-18

CVE-2023-30464-CoreDNS Cache Poisoning via a birthday attack

coredns/coredns · GHSA-h92q-fgpp-qhrq

critical2024-09-18

CVE-2023-47105-Chaosblade vulnerable to OS command execution

chaosblade-io/chaosblade · GHSA-723h-x37g-f8qm

high2024-09-18

CVE-2024-45601-Mesop has a local file Inclusion via static file serving functionality

google/mesop · GHSA-pmv9-3xqp-8w42

high2024-09-18

CVE-2022-25768-Mautic vulnerable to Improper Access Control in UI upgrade process

mautic/mautic · GHSA-x3jx-5w6m-q2fc

medium2024-09-18

CVE-2024-46989-SpiceDB having multiple caveats on resources of the same type may improperly result in no permission

authzed/spicedb · GHSA-jhg6-6qrx-38mr

medium2024-09-18

CVE-2024-46990-Directus vulnerable to SSRF Loopback IP filter bypass

directus/directus · GHSA-68g8-c275-xf2m

high2024-09-18

CVE-2024-45813-find-my-way has a ReDoS vulnerability in multiparametric routes

delvedor/find-my-way · GHSA-rrr8-f88r-h8q6

high2024-09-18

Camaleon CMS vulnerable to remote code execution through code injection (GHSL-2024-185)

owen2345/camaleon-cms · GHSA-7x4w-cj9r-h4v9

medium2024-09-18

Camaleon CMS vulnerable to stored XSS through user file upload (GHSL-2024-184)

owen2345/camaleon-cms · GHSA-r9cr-qmfw-pmrc

high2024-09-18

CVE-2024-46987-Camaleon CMS vulnerable to arbitrary path traversal (GHSL-2024-183)

owen2345/camaleon-cms · GHSA-cp65-5m9r-vc2c

high2024-09-18

CVE-2024-45858-Guardrails has an arbitrary code execution vulnerability

guardrails-ai/guardrails · GHSA-w392-75q8-vr67

high2024-09-18

CVE-2023-28452-CoreDNS vulnerable to TuDoor Attacks

coredns/coredns · GHSA-hfmw-7g3m-gj6q

high2024-09-18

CVE-2024-35515-sqlitedict insecure deserialization vulnerability

piskvorky/sqlitedict · GHSA-g4r7-86gm-pgqc

high2024-09-18

CVE-2024-46986-Camaleon CMS affected by arbitrary file write to RCE (GHSL-2024-182)

owen2345/camaleon-cms · GHSA-wmjg-vqhv-q5p5