Security advisories

medium2024-09-17

CVE-2024-47047-powermail TYPO3 extension has Insecure Direct Object Reference

in2code-de/powermail · GHSA-q25c-r482-77p9

medium2024-09-17

CVE-2024-47049-czim/file-handling vulnerable to SSRF and directory traversal

czim/file-handling · GHSA-6rgh-r6j3-3223

medium2024-09-17

CVE-2024-45612-Contao affected by insert tag injection via canonical URL

contao/contao · GHSA-2xpq-xp6c-5mgj

medium2024-09-17

CVE-2024-45604-Contao affected by directory traversal in the file selector widget

contao/contao · GHSA-4p75-5p53-65m9

high2024-09-17

CVE-2024-45398-Contao affected by remote command execution through file upload

contao/contao · GHSA-vm6r-j788-hjh5

high2024-09-17

CVE-2024-5998-LangChain pickle deserialization of untrusted data

langchain-ai/langchain · GHSA-f2jm-rw3h-6phg

medium2024-09-17

CVE-2024-7387-OpenShift Builder has a path traversal, allows command injection in privileged BuildContainer

openshift/builder · GHSA-qqv8-ph7f-h3f7

medium2024-09-17

CVE-2024-45496-OpenShift Controller Manager Improper Privilege Management

openshift/openshift-controller-manager · GHSA-j8gh-87rx-c7w9

high2024-09-16

CVE-2024-45801-DOMPurify allows tampering by prototype pollution

cure53/dompurify · GHSA-mmhx-hmjr-r674

medium2024-09-16

CVE-2024-8661-Concrete CMS Stored XSS in the "Next&Previous Nav" block

concretecms/concretecms · GHSA-xmxj-v2q8-8qx6

low2024-09-16

lexical-core has multiple soundness issues

alexhuszagh/rust-lexical · GHSA-2326-pfpj-vx3h

medium2024-09-16

CVE-2024-39910- Decidim::Admin vulnerable to cross-site scripting (XSS) in the admin panel with QuillJS WYSWYG editor

decidim/decidim · GHSA-vvqw-fqwx-mqmm

medium2024-09-16

CVE-2024-32034-Decidim::Admin vulnerable to cross-site scripting (XSS) in the admin activity log

decidim/decidim · GHSA-rx9f-5ggv-5rh6

low2024-09-16

CVE-2024-45835-Mattermost Desktop App fails to sufficiently configure Electron Fuses

mattermost/desktop · GHSA-xgq9-7gw6-jr5r

medium2024-09-16

CVE-2024-39772-Mattermost Desktop App fails to safeguard screen capture functionality

mattermost/desktop · GHSA-5777-rcjj-9p22

medium2024-09-16

CVE-2024-39613-Mattermost Desktop App Uncontrolled Search Path Vulnerability

mattermost/desktop · GHSA-wj4j-qc2m-fgh7

high2024-09-16

CVE-2024-46942-OpenDaylight Model-Driven Service Abstraction Layer (MD-SAL) allows follower controller to set up flow entries

opendaylight/mdsal · GHSA-hv38-h5pj-c96j

medium2024-09-16

CVE-2024-46943-OpenDaylight Authentication, Authorization and Accounting (AAA) peer impersonation vulnerability

opendaylight/aaa · GHSA-46hr-3cq3-mcgp

critical2024-09-16

CVE-2024-22399-Apache Seata Deserialization of Untrusted Data vulnerability

apache/incubator-seata · GHSA-3xq2-w6j4-c99r

medium2024-09-16

CVE-2024-8863-Aim Stored XSS through TEXT EXPLORER

aimhubio/aim · GHSA-pmhg-f7wc-c97m