Security advisories

medium2024-08-05

CVE-2024-35181-Meshery SQL Injection vulnerability

layer5io/meshery · GHSA-9f24-jrv4-f8g5

medium2024-08-05

CVE-2024-31450-Owncast Path Traversal vulnerability

owncast/owncast · GHSA-9355-27m8-h74v

medium2024-08-05

CVE-2024-29191-gotortc Cross-site Scripting vulnerability

alexxit/go2rtc · GHSA-wv8x-3w6r-6h7v

medium2024-08-05

CVE-2024-29193-gotortc Cross-site Scripting vulnerability

alexxit/go2rtc · GHSA-rh4r-f7f7-r99m

high2024-08-05

CVE-2024-29192-gotortc vulnerable to Cross-Site Request Forgery

alexxit/go2rtc · GHSA-qgj8-g9q4-7f2p

medium2024-08-05

CVE-2024-29029-memos vulnerable to Server-Side Request Forgery and Cross-site Scripting

usememos/memos · GHSA-9cqm-mgv9-vv9j

medium2024-08-05

CVE-2024-29028-memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta

usememos/memos · GHSA-6fcf-g3mp-xj2x

medium2024-08-05

CVE-2024-29030-memos vulnerable to Server-Side Request Forgery in /api/resource

usememos/memos · GHSA-65fm-2jgr-j7qq

high2024-08-05

CVE-2024-29031-Meshery SQL Injection vulnerability

meshery/meshery · GHSA-652r-q29p-m25h

high2024-08-05

CVE-2024-29026-Owncast Cross-Site Request Forgery vulnerability

owncast/owncast · GHSA-v99w-r56h-g23v

critical2024-08-05

CVE-2023-49785-NextChat has full-read SSRF and XSS vulnerability in /api/cors endpoint

chatgptnextweb/chatgpt-next-web · GHSA-qf3q-9f3h-cjp9

high2024-08-05

CVE-2023-48703-RobotsAndPencils go-saml authentication bypass vulnerability

robotsandpencils/go-saml · GHSA-6h53-q94j-348w

medium2024-08-05

CVE-2023-47620-Scrypted Cross-site Scripting vulnerability

koush/scrypted · GHSA-xmhh-xrcc-mx36

medium2024-08-05

CVE-2023-47623-Scrypted Cross-site Scripting vulnerability

koush/scrypted · GHSA-ww7p-8gfg-v82r

critical2024-08-05

CVE-2023-45146-XXL-RPC Deserialization of Untrusted Data vulnerability

xuxueli/xxl-rpc · GHSA-f984-3wx8-grp9

critical2024-08-05

CVE-2023-42809-Redisson vulnerable to Deserialization of Untrusted Data

redisson/redisson · GHSA-4hvc-qwr2-f8rv

medium2024-08-05

CVE-2023-28857-Apereo CAS vulnerable to credential leaks for LDAP authentication

apereo/cas · GHSA-p78h-m8pv-g9gm

medium2024-08-05

CVE-2022-23554-Alpine allows Authentication Filter bypass

stevespringett/alpine · GHSA-whr2-9x5f-5c79

medium2024-08-05

CVE-2023-26494-lorawan-stack Open Redirect vulnerability

thethingsnetwork/lorawan-stack · GHSA-5fwq-9x7j-2qpg

high2024-08-05

CVE-2022-23553-Alpine allows URL access filter bypass

stevespringett/alpine · GHSA-2w4p-2hf7-gh8x