Security advisories

critical2024-07-17

CVE-2023-7272-Eclipse Parsson stack overflow when parsing deeply nested input

eclipse-ee4j/parsson · GHSA-2rwm-xv5j-777p

high2024-07-17

CVE-2024-40633-Sylius has a security vulnerability via adjustments API endpoint

sylius/sylius · GHSA-55rf-8q29-4g43

medium2024-07-17

CVE-2024-32981-Silverstripe Framework has a Cross-site Scripting vulnerability with encoded payload

silverstripe/silverstripe-framework · GHSA-chx7-9x8h-r5mg

medium2024-07-17

CVE-2024-29885-Silverstripe Reports are still accessible even when `canView()` returns false

silverstripe/silverstripe-reports · GHSA-89q6-98xx-4ffw

high2024-07-17

CVE-2024-31411-Apache StreamPipes has potential remote code execution (RCE) via file upload

apache/streampipes · GHSA-6523-jf4r-c962

high2024-07-17

CVE-2024-39877-Apache Airflow has DAG Author Code Execution possibility in airflow-scheduler

apache/airflow · GHSA-g5hv-r743-v8pm

medium2024-07-17

CVE-2024-31979-Apache StreamPipes has possibility of SSRF in pipeline element installation process

apache/streampipes · GHSA-9gr7-gh74-qg9x

medium2024-07-17

CVE-2023-52291-Apache StreamPark: Unchecked maven build params could trigger remote command execution

apache/streampark · GHSA-7g94-hfqc-q993

medium2024-07-17

CVE-2024-29737-Apache StreamPark: maven build params could trigger remote command execution

apache/streampark · GHSA-5v69-92vw-fmjh

medium2024-07-17

CVE-2024-30471-Apache StreamPipes potentially allows creation of multiple identical accounts

apache/streampipes · GHSA-2qph-v9p2-q2gv

medium2024-07-17

CVE-2024-39863-Apache Airflow Potential Cross-site Scripting Vulnerability

apache/airflow · GHSA-j482-47xf-p25c

high2024-07-17

CVE-2024-6535-Skupper uses a static cookie secret for the openshift oauth-proxy

skupperproject/skupper · GHSA-w799-v85j-88pg

medium2024-07-16

CVE-2024-39908-REXML denial of service vulnerability

ruby/rexml · GHSA-4xqq-m2hx-25v8

critical2024-07-16

Fiona affected by CVE-2023-45853 related to MiniZip madler-zlib

toblerity/fiona · GHSA-q5fm-55c2-v6j9

high2024-07-16

Fiona affected by CVE-2020-14152 related to madler-zlib

toblerity/fiona · GHSA-g4m4-9q4c-mfw6

medium2024-07-16

CVE-2024-39887-Apache Superset vulnerable to improper SQL authorization

apache/superset · GHSA-2q6j-vpvr-6pvj

high2024-07-15

CVE-2024-40631-Plate media plugins has a XSS in media embed element when using custom URL parsers

udecode/plate · GHSA-h3pq-667x-r789

low2024-07-15

RISC Zero zkVM notes on zero-knowledge

risc0/risc0 · GHSA-5xgj-pmjj-gw49

medium2024-07-15

ZITADEL Go's GRPC example code vulnerability - GO-2024-2687 HTTP/2 CONTINUATION flood in net/http

zitadel/zitadel-go · GHSA-qc6v-5g5m-8cw2

medium2024-07-15

CVE-2024-40627-OpaMiddleware does not filter HTTP OPTIONS requests

busykoala/fastapi-opa · GHSA-5f5c-8rvc-j8wf