Security advisories

medium2024-08-21

CVE-2024-41937-Apache Airflow Cross-site Scripting Vulnerability

apache/airflow · GHSA-w7cp-g8v7-r54m

medium2024-08-21

CVE-2024-43411-CKEditor4 low-risk cross-site scripting (XSS) vulnerability linked to potential domain takeover

ckeditor/ckeditor4 · GHSA-6v96-m24v-f58j

medium2024-08-21

CVE-2024-43407-Code Snippet GeSHi plugin in CKEditor 4 has reflected cross-site scripting (XSS) vulnerability

ckeditor/ckeditor4 · GHSA-7r32-vfj5-c2jv

medium2024-08-21

CVE-2024-43371-Potential access to sensitive URLs via CKAN extensions (SSRF)

ckan/ckan · GHSA-g9ph-j5vj-f8wm

medium2024-08-21

CVE-2024-41675-CKAN has Cross-site Scripting vector in the Datatables view plugin

ckan/ckan · GHSA-r3jc-vhf4-6v32

medium2024-08-21

CVE-2024-41674-CKAN may leak Solr credentials via error message in package_search action

ckan/ckan · GHSA-2rqw-cfhc-35fh

high2024-08-21

CVE-2024-7885-Undertow vulnerable to Race Condition

undertow-io/undertow · GHSA-9623-mqmm-5rcf

high2024-08-21

CVE-2023-49198-Apache SeaTunnel SQL Injection vulnerability

apache/seatunnel · GHSA-8m84-h9hh-3cfh

medium2024-08-21

CVE-2024-6508-Openshift Console insufficient entropy vulnerability

openshift/console · GHSA-4crf-28c7-v4gr

high2024-08-21

CVE-2024-22281-Apache Helix Front (UI) component contained a hard-coded secret

apache/helix · GHSA-6247-7862-q2pq

medium2024-08-20

CVE-2024-43409-Ghost's improper authentication allows access to member information and actions

tryghost/ghost · GHSA-78x2-cwp9-5j42

high2024-08-20

CVE-2024-43406-LF Edge eKuiper has a SQL Injection in sqlKvStore

lf-edge/ekuiper · GHSA-r5ph-4jxm-6j9p

medium2024-08-20

CVE-2024-43396-Khoj Vulnerable to Stored Cross-site Scripting In Automate (Preview feature)

khoj-ai/khoj · GHSA-cf72-vg59-4j4h

medium2024-08-20

CVE-2024-43397-apollo-portal has potential unauthorized access issue

apolloconfig/apollo · GHSA-c6c3-h4f7-3962

medium2024-08-20

CVE-2024-42369-matrix-js-sdk will freeze when a user sets a room with itself as a its predecessor

matrix-org/matrix-js-sdk · GHSA-vhr5-g3pm-49fm

high2024-08-20

CVE-2024-39690-Capsule tenant owner with "patch namespace" permission can hijack system namespaces

projectcapsule/capsule · GHSA-mq69-4j5w-3qwp

medium2024-08-20

CVE-2024-43377-Umbraco CMS Improper Access Control vulnerability

umbraco/umbraco-cms · GHSA-hrww-x3fq-xcvh

medium2024-08-20

CVE-2024-6322-Grafana plugin data sources vulnerable to access control bypass

grafana/grafana · GHSA-hh8p-374f-qgr5

medium2024-08-20

CVE-2024-43376-Umbraco CMS vulnerable to Generation of Error Message Containing Sensitive Information

umbraco/umbraco-cms · GHSA-77gj-crhp-3gvx

medium2024-08-20

CVE-2024-38808-Spring Framework vulnerable to Denial of Service

spring-projects/spring-framework · GHSA-9cmq-m9j5-mvww