Security advisories

medium2024-08-30

CVE-2024-8260-OPA for Windows has an SMB force-authentication vulnerability

open-policy-agent/opa · GHSA-c77r-fh37-x2px

medium2024-08-29

CVE-2024-45302-CRLF Injection in RestSharp's `RestRequest.AddHeader` method

restsharp/restsharp · GHSA-4rr6-2v9v-wcpc

medium2024-08-29

CVE-2024-44930-Serilog Client IP Spoofing vulnerability

serilog-contrib/serilog-enrichers-clientinfo · GHSA-5x5q-cqf6-gj8r

medium2024-08-29

CVE-2024-45054-Hwameistor Potential Permission Leakage of Cluster Level

hwameistor/hwameistor · GHSA-mgwr-h7mv-fh29

medium2024-08-29

CVE-2024-45232-"powermail" (powermail) Insecure Direct Object Reference (IDOR)

in2code-de/powermail · GHSA-p652-xcgx-f85m

high2024-08-29

CVE-2024-45048-XXE in PHPSpreadsheet encoding is returned

phpoffice/phpspreadsheet · GHSA-ghg6-32f9-2jp7

medium2024-08-29

CVE-2024-45046-PhpSpreadsheet HTML writer is vulnerable to Cross-Site Scripting via style information

phpoffice/phpspreadsheet · GHSA-wgmf-q9vr-vww6

medium2024-08-29

CVE-2024-45043-OpenTelemetry Collector module AWS Firehose Receiver Authentication Bypass Vulnerability

open-telemetry/opentelemetry-collector-contrib · GHSA-prf6-xjxh-p698

high2024-08-29

CVE-2024-43805-HTML injection in Jupyter Notebook and JupyterLab leading to DOM Clobbering

jupyterlab/jupyterlab · GHSA-9q39-rmj3-p4r2

high2024-08-29

CVE-2024-41964-Kirby has insufficient permission checks in the language settings

getkirby/kirby · GHSA-jm9m-rqr3-wfmh

medium2024-08-29

CVE-2024-8296-FeehiCMS User[avatar] unrestricted upload

liufee/cms · GHSA-xp68-7g33-f49m

medium2024-08-29

CVE-2024-8294-FeehiCMS file upload vulnerability

liufee/cms · GHSA-xxqw-83c7-r24r

medium2024-08-29

CVE-2024-45440-Drupal Full Path Disclosure

drupal/drupal · GHSA-mg8j-w93w-xjgc

medium2024-08-29

CVE-2024-8295-FeehiCMS BannerForm[img] unrestricted upload

liufee/cms · GHSA-3wrg-6mg5-jg2v

high2024-08-29

CVE-2024-45436-Ollama can extract members of a ZIP archive outside of the parent directory

ollama/ollama · GHSA-846m-99qv-67mg

medium2024-08-29

CVE-2024-45233-Powermail TYPO3 extension Broken Access Control in the OutputController

in2code-de/powermail · GHSA-9jqr-5x45-pgw8

medium2024-08-27

CVE-2024-6534-Directus has an insecure object reference via PATH presets

directus/directus · GHSA-3fff-gqw3-vj86

medium2024-08-27

CVE-2024-45037-AWS CDK RestApi not generating authorizationScope correctly in resultant CFN template

aws/aws-cdk · GHSA-qj85-69xf-2vxq

medium2024-08-27

CVE-2024-47833-Taipy has a Session Cookie without Secure and HTTPOnly flags

avaiga/taipy · GHSA-r3jq-4r5c-j9hp

high2024-08-27

Taipy 3.1.1 affected by CVEs on flask-core and pymongo

avaiga/taipy · GHSA-pp84-v3mw-gg4w