Security advisories

medium2024-08-07

CVE-2024-41991-Django vulnerable to denial-of-service attack

django/django · GHSA-r836-hh6v-rg5g

critical2024-08-07

CVE-2024-42005-Django SQL injection vulnerability

django/django · GHSA-pv4p-cwwg-4rph

medium2024-08-07

CVE-2024-41989-Django memory consumption vulnerability

django/django · GHSA-jh75-99hh-qvx9

high2024-08-07

CVE-2024-43044-Jenkins Remoting library arbitrary file read vulnerability

jenkinsci/remoting · GHSA-h856-ffvv-xvr4

medium2024-08-07

CVE-2024-43045-Jenkins does not perform a permission check in an HTTP endpoint

jenkinsci/jenkins · GHSA-8pv9-qh96-9hc6

medium2024-08-07

CVE-2024-41990-Django vulnerable to a denial-of-service attack

django/django · GHSA-795c-9xpc-xw6g

medium2024-08-06

CVE-2024-41270-Gorush uses deprecated TLS versions

appleboy/gorush · GHSA-p3pf-mff8-3h47

medium2024-08-06

CVE-2024-41677-Qwik has a potential mXSS vulnerability due to improper HTML escaping

qwikdev/qwik · GHSA-2rwj-7xq8-4gx4

medium2024-08-06

CVE-2024-40101-Microweber Reflected Cross-site scripting (XSS) vulnerability

microweber/microweber · GHSA-m99v-mmg2-66vf

medium2024-08-06

CVE-2024-42347-Matrix SDK for React's URL preview setting for a room is controllable by the homeserver

matrix-org/matrix-react-sdk · GHSA-f83w-wqhc-cfp4

critical2024-08-06

CVE-2024-6886-Gitea Cross-site Scripting Vulnerability

go-gitea/gitea · GHSA-4h4p-553m-46qh

critical2024-08-05

CVE-2023-37469-CasaOS Command Injection vulnerability

icewhaletech/casaos · GHSA-92vc-4fcw-g68q

critical2024-08-05

CVE-2023-30625-rudder-server is vulnerable to SQL injection

rudderlabs/rudder-server · GHSA-3jmm-f6jj-rcc3

medium2024-08-05

CVE-2024-37146-Flowise Cross-site Scripting in/api/v1/credentials/id

flowiseai/flowise · GHSA-wxm4-9f8p-gggv

medium2024-08-05

CVE-2024-36423-Flowise Cross-site Scripting in /api/v1/public-chatflows/id

flowiseai/flowise · GHSA-fccx-2pwj-hrq7

medium2024-08-05

CVE-2024-37145-Flowise Cross-site Scripting in /api/v1/chatflows-streaming/id

flowiseai/flowise · GHSA-858c-qxvx-rg9v

medium2024-08-05

CVE-2024-36422-Flowise Cross-site Scripting in api/v1/chatflows/id

flowiseai/flowise · GHSA-2jch-qc96-9f5g

high2024-08-05

CVE-2024-36420-Flowise Path Injection at /api/v1/openai-assistants-file

flowiseai/flowise · GHSA-h997-3fxj-p5j8

high2024-08-05

CVE-2024-36421-Flowise Cors Misconfiguration in packages/server/src/index.ts

flowiseai/flowise · GHSA-66f2-xxgm-f6xp

medium2024-08-05

CVE-2024-35182-Meshery SQL Injection vulnerability

layer5io/meshery · GHSA-h7cm-jvpp-69xf