Security advisories

medium2024-08-27

CVE-2024-43788-Webpack's AutoPublicPathRuntimeModule has a DOM Clobbering Gadget that leads to XSS

webpack/webpack · GHSA-4vvj-4cpr-p986

high2024-08-27

CVE-2024-43798-Chisel's AUTH environment variable not respected in server entrypoint

jpillora/chisel · GHSA-38jh-8h67-m7mj

high2024-08-27

CVE-2024-43783-Apollo Router Coprocessors may cause Denial-of-Service when handling request bodies

apollographql/router · GHSA-x6xq-whh3-gg32

high2024-08-27

CVE-2024-43414-Apollo Query Planner and Apollo Gateway may infinitely loop on sufficiently complex queries

apollographql/federation · GHSA-fmj9-77q8-g6c4

high2024-08-27

CVE-2024-8182-Flowise Unauthenticated Denial of Service (DoS) vulnerability

flowiseai/flowise · GHSA-48x4-mx8f-gr4h

high2024-08-27

CVE-2024-8181-Flowise Authentication Bypass vulnerability

flowiseai/flowise · GHSA-2q4w-x8h2-2fvh

medium2024-08-26

CVE-2024-42818-FastAPI Admin Cross-site Scripting vulnerability in the Config-Create function

fastapi-admin/fastapi-admin · GHSA-grqx-r2q2-j425

medium2024-08-26

CVE-2024-42816-FastAPI Admin cross-site scripting (XSS) vulnerability in the Create Product function

fastapi-admin/fastapi-admin · GHSA-22xm-w7r2-834q

high2024-08-26

unzip-stream allows Arbitrary File Write via artifact extraction

mhr3/unzip-stream · GHSA-6jrj-vc65-c983

medium2024-08-26

CVE-2024-45258-req may send an unintended request when a malformed URL is provided

imroc/req · GHSA-cj55-gc7m-wvcq

medium2024-08-25

CVE-2024-45244-Hyperledger Fabric does not verify request has a timestamp within the expected time window

hyperledger/fabric · GHSA-48gg-32q2-4r6m

medium2024-08-23

CVE-2024-45188-Mage AI Path Traversal vulnerability

mage-ai/mage-ai · GHSA-v9wr-8wrm-h6p7

medium2024-08-23

CVE-2024-45187-Mage AI incorrectly gives privileges to users with deleted accounts

mage-ai/mage-ai · GHSA-jg95-r9xh-xw9c

medium2024-08-23

CVE-2024-45189-Mage AI Path Traversal vulnerability

mage-ai/mage-ai · GHSA-cgxv-795x-3vqr

medium2024-08-23

CVE-2024-45190-Mage AI Path Traversal vulnerability

mage-ai/mage-ai · GHSA-4mrc-w7jh-hx4j

high2024-08-23

Froxlor: /etc/pure-ftpd/db/mysql.conf is chmod 644 but contains <SQL_UNPRIVILEGED_PASSWORD>

froxlor/froxlor · GHSA-34qg-65m4-f23m

medium2024-08-23

CVE-2024-43791-request_store has Incorrect Default Permissions

steveklabnik/request_store · GHSA-frp2-5qfc-7r8m

high2024-08-23

Diesel vulnerable to Binary Protocol Misinterpretation caused by Truncating or Overflowing Casts

diesel-rs/diesel · GHSA-wq9x-qwcq-mmgf

high2024-08-23

CVE-2024-8113-pretix Stored Cross-site Scripting vulnerability

pretix/pretix · GHSA-45rp-q25w-4426

medium2024-08-23

CVE-2024-43105-Mattermost Plugin Channel Export excessive resource consumption

mattermost/mattermost-plugin-channel-export · GHSA-869f-px86-vj84