Security advisories

medium2024-08-05

CVE-2022-23474-Editor.js vulnerable to Code Injection

codex-team/editor.js · GHSA-6mvj-2569-3mcm

high2024-08-05

CVE-2024-42352-Nuxt Icon affected by a Server-Side Request Forgery (SSRF)

nuxt/icon · GHSA-cxgv-px37-4mp2

critical2024-08-05

CVE-2024-34344-Nuxt vulnerable to remote code execution via the browser when running the test locally

nuxt/nuxt · GHSA-v784-fjjh-f8r4

medium2024-08-05

CVE-2024-34343-nuxt vulnerable to Cross-site Scripting in navigateTo if used after SSR

nuxt/nuxt · GHSA-vf6r-87q4-2vjf

high2024-08-05

CVE-2024-23657-Nuxt Devtools has a Path Traversal: '../filedir'

nuxt/nuxt · GHSA-rcvg-rgf7-pppv

medium2024-08-05

CVE-2024-41380-Microweber Cross Site Scripting (XSS) vulnerability

microweber/microweber · GHSA-hf66-xfgj-42g8

medium2024-08-05

CVE-2024-41381-Microweber Cross Site Scripting (XSS) vulnerability

microweber/microweber · GHSA-h4xf-wx99-jmv4

high2024-08-05

Juju's unprivileged user running on charm node can leak any secret or relation data accessible to the local charm

juju/juju · GHSA-6vjm-54vp-mxhx

high2024-08-05

CVE-2024-41820-Kubean vulnerable to cluster-level privilege escalation

kubean-io/kubean · GHSA-3wfj-3x8q-hrpg

medium2024-08-05

CVE-2025-24882-In regclient, pinned manifest digests may be ignored

regclient/regclient · GHSA-qv35-3gw6-8q4j

low2024-08-05

CVE-2024-41811-ipl/web's `ipl\Web\Common\CsrfCounterMeasure` is susceptible to CSRF

icinga/ipl-web · GHSA-w9pg-7c3h-fc8j

low2024-08-05

CVE-2024-42447-Apache Airflow Providers FAB Insufficient Session Expiration vulnerability

apache/airflow · GHSA-62qf-qm3g-fvcw

high2024-08-05

CVE-2024-39713-Rocket.Chat Server-Side Request Forgery (SSRF) vulnerability

rocketchat/rocket.chat · GHSA-ffxg-5f8m-h72j

medium2024-08-03

CVE-2024-37286-APM Server vulnerable to Insertion of Sensitive Information into Log File

elastic/apm-server · GHSA-f6cj-4h3g-hwq4

high2024-08-02

CVE-2024-3056-Podman vulnerable to memory-based denial of service

containers/podman · GHSA-rpcc-p8xm-rc6p

medium2024-08-02

CVE-2024-7319-openstack-heat may disclose sensitive information

openstack/heat · GHSA-2fqr-cx7q-3ph8

high2024-08-02

CVE-2024-36116-Path traversal in Reposilite javadoc file expansion (arbitrary file creation/overwrite) (`GHSL-2024-073`)

dzikoysk/reposilite · GHSA-frvj-cfq4-3228

high2024-08-02

CVE-2024-36115-Reposilite artifacts vulnerable to Stored Cross-site Scripting

dzikoysk/reposilite · GHSA-9w8w-34vr-65j2

high2024-08-02

CVE-2024-41956-soft-serve vulnerable to arbitrary code execution by crafting git-lfs requests

charmbracelet/soft-serve · GHSA-m445-w3xr-vp2f

medium2024-08-02

CVE-2024-41946-REXML DoS vulnerability

ruby/rexml · GHSA-5866-49gr-22v4