Security advisories

critical2024-07-15

CVE-2024-40624-TorrentPier Deserialization of Untrusted Data vulnerability

torrentpier/torrentpier · GHSA-fg86-4c2r-7wxw

medium2024-07-15

CVE-2024-39919-@jmondi/url-to-png enables capture screenshot of localhost web services (unauthenticated pages)

jasonraimondi/url-to-png · GHSA-342q-2mc2-5gmp

medium2024-07-15

CVE-2024-39918-@jmondi/url-to-png contains a Path Traversal vulnerability

jasonraimondi/url-to-png · GHSA-vvmv-wrvp-9gjr

medium2024-07-15

CVE-2024-39912-The FIDO2/Webauthn Support for PHP library allows enumeration of valid usernames

web-auth/webauthn-framework · GHSA-875x-g8p7-5w27

high2024-07-15

CVE-2023-49566-Apache Linkis DataSource's JDBC Datasource Module with DB2 has JNDI Injection vulnerability

apache/linkis · GHSA-7qpc-4xx9-x5qw

high2024-07-15

CVE-2023-46801-Apache Linkis DataSource remote code execution vulnerability

apache/linkis · GHSA-jjvc-v8gw-5255

high2024-07-15

CVE-2023-41916-Apache Linkis DataSource allows arbitrary file reading

apache/linkis · GHSA-f22j-9j59-33j4

critical2024-07-15

CVE-2024-21513-langchain-experimental vulnerable to Arbitrary Code Execution

langchain-ai/langchain · GHSA-cgcg-p68q-3w7v

high2024-07-15

CVE-2024-6345-setuptools vulnerable to Command Injection via package URL

pypa/setuptools · GHSA-cx63-2mw6-8hw5

high2024-07-12

CVE-2024-39903-Local File Inclusion in Solara

widgetti/solara · GHSA-9794-pc4r-438w

high2024-07-12

CVE-2024-36522-Apache Wicket: Remote code execution via XSLT injection

apache/wicket · GHSA-hhwc-gh8h-9rrp

high2024-07-12

CVE-2024-39909-SQL Injection in the KubeClarity REST API

openclarity/kubeclarity · GHSA-5248-h45p-9pgw

high2024-07-11

CVE-2024-6468-Hashicorp Vault vulnerable to Improper Check or Handling of Exceptional Conditions

hashicorp/vault · GHSA-2qmw-pvf7-4mw6

medium2024-07-11

CVE-2023-6813-Login by Auth0 plugin for WordPress vulnerable to Reflected Cross-Site Scripting

auth0/wordpress · GHSA-x6p7-44rh-m3rr

medium2024-07-11

CVE-2024-6485-Bootstrap Cross-Site Scripting (XSS) vulnerability for data-* attributes

twbs/bootstrap · GHSA-vxmc-5x29-h64v

high2024-07-11

Mimekit has vulnerable dependency that can lead to denial of service

jstedfast/mimekit · GHSA-gmc6-fwg3-75m5

medium2024-07-11

CVE-2024-39905-Red-DiscordBot vulnerable to Incorrect Authorization in commands API

cog-creators/red-discordbot · GHSA-5jq8-q6rj-9gq4

high2024-07-11

CVE-2024-39317-Wagtail regular expression denial-of-service via search query parsing

wagtail/wagtail · GHSA-jmp3-39vp-fwg8

medium2024-07-11

SurrealDB vulnerable to Improper Authentication when Changing Databases as Scope User

surrealdb/surrealdb · GHSA-gh9f-6xm2-c4j2

low2024-07-10

CVE-2024-39901-OpenSearch Observability does not properly restrict access to private tenant resources

opensearch-project/observability · GHSA-77vc-rj32-2r33