Security advisories

high2024-07-22

CVE-2024-25638-DNSJava DNSSEC Bypass

dnsjava/dnsjava · GHSA-cfxw-4h78-h7fw

high2024-07-22

CVE-2024-38503-Apache Syncope Improper Input Validation vulnerability

apache/syncope · GHSA-8pxv-x6jq-5vw9

medium2024-07-22

CVE-2024-23321-Apache RocketMQ Vulnerable to Unauthorized Exposure of Sensitive Data

apache/rocketmq · GHSA-q9w2-h4cw-8ghp

medium2024-07-22

CVE-2024-41709-Backdrop CMS does not sufficiently sanitize field labels before they are displayed in certain places

backdrop-ops/backdrop-composer · GHSA-3wmx-48g3-x66g

high2024-07-21

CVE-2024-6960-H2O vulnerable to Deserialization of Untrusted Data

h2oai/h2o-3 · GHSA-w36w-948j-xhfw

high2024-07-21

CVE-2024-6961-Guardrails AI vulnerable to Improper Restriction of XML External Entity Reference

guardrails-ai/guardrails · GHSA-f8hx-f4xw-c646

high2024-07-20

CVE-2024-6281-LoLLMS vulnerable to Expected Behavior Violation

parisneo/lollms · GHSA-8mrm-r7h3-c3hj

low2024-07-19

CVE-2024-41597-ProcessWire Cross Site Request Forgery vulnerability

processwire/processwire · GHSA-r9vw-cjf9-xh4x

medium2024-07-19

CVE-2024-39123-Calibre-Web Cross Site Scripting (XSS)

janeczku/calibre-web · GHSA-j22r-3rf3-cv25

high2024-07-19

CVE-2024-40400-Automad arbitrary file upload vulnerability

marcantondahmen/automad · GHSA-47mc-qmh2-mqj4

low2024-07-19

CVE-2024-41124-[PUNCIA] [CWE-319] Cleartext Transmission of Sensitive Information via HTTP urls in `API_URLS`

arpsyndicate/puncia · GHSA-rwcj-7jjp-4w38

high2024-07-19

CVE-2024-41121-Woodpecker's custom workspace allow to overwrite plugin entrypoint executable

woodpecker-ci/woodpecker · GHSA-xw35-rrcp-g7xm

medium2024-07-19

CVE-2024-41122-Woodpecker's custom environment variables allow to alter execution flow of plugins

woodpecker-ci/woodpecker · GHSA-3wf2-2pq4-4rvc

medium2024-07-19

CVE-2024-32007-Apache CXF Denial of Service vulnerability in JOSE

apache/cxf · GHSA-6pff-fmh2-4mmf

high2024-07-19

CVE-2024-29736-Apache CXF: SSRF vulnerability via WADL stylesheet parameter

apache/cxf · GHSA-5m3j-pxh7-455p

medium2024-07-19

CVE-2024-41172-Apache CXF allows unrestricted memory consumption in CXF HTTP clients

apache/cxf · GHSA-4mgg-fqfq-64hg

medium2024-07-19

CVE-2024-21583-github.com/gitpod-io/gitpod vulnerable to Cookie Tossing

gitpod-io/gitpod · GHSA-8pgc-65mj-53h5

high2024-07-18

CVE-2024-40642-Absent Input Validation in BinaryHttpParser

netty/netty-incubator-codec-ohttp · GHSA-q8f2-hxq5-cp4h

high2024-07-18

CVE-2024-35199-TorchServe gRPC Port Exposure

pytorch/serve · GHSA-hhpg-v63p-wp7w

critical2024-07-18

CVE-2024-35198-TorchServe vulnerable to bypass of allowed_urls configuration

pytorch/serve · GHSA-wxcx-gg9c-fwp2