Security advisories

high2024-07-10

CVE-2024-39693-Next.js Denial of Service (DoS) condition

vercel/next.js · GHSA-fq54-2j52-jc42

medium2024-07-10

CVE-2024-27095-Decidim cross-site scripting (XSS) in the admin panel

decidim/decidim · GHSA-529p-jj47-w3m3

medium2024-07-10

CVE-2024-32469-Decidim cross-site scripting (XSS) in the pagination

decidim/decidim · GHSA-7cx8-44pc-xv3q

medium2024-07-10

CVE-2024-27090-Decidim vulnerable to data disclosure through the embed feature

decidim/decidim · GHSA-qcj6-vxwx-4rqv

medium2024-07-10

CVE-2024-39899-PrivateBin allows shortening of URLs for other domains

privatebin/privatebin · GHSA-mqqj-fx8h-437j

high2024-07-10

CVE-2024-39696-Evmos vulnerable to exploit of smart contract account and vesting

evmos/evmos · GHSA-q6hg-6m9x-5g9c

medium2024-07-10

CVE-2024-39329-Django vulnerable to user enumeration attack

django/django · GHSA-x7q2-wr7g-xqmf

high2024-07-10

CVE-2024-21525-node-twain vulnerable to Improper Check or Handling of Exceptional Conditions

luomusha/node-twain · GHSA-wxr3-2hgv-qm8f

high2024-07-10

CVE-2024-21526-speaker vulnerable to Denial of Service

tootallnate/node-speaker · GHSA-w5fc-gj3h-26rx

high2024-07-10

CVE-2024-21523-images vulnerable to Denial of Service

zhangyuanwei/node-images · GHSA-vjpv-x8p9-7p85

high2024-07-10

CVE-2024-38875-Django vulnerable to Denial of Service

django/django · GHSA-qg2p-9jwr-mmqf

high2024-07-10

CVE-2024-21524-node-stringbuilder vulnerable to Out-of-bounds Read

magiclen/node-stringbuilder · GHSA-g533-xq5w-jmf3

high2024-07-10

CVE-2024-39614-Django vulnerable to Denial of Service

django/django · GHSA-f6f8-9mx6-9mx2

high2024-07-10

CVE-2024-39330-Django Path Traversal vulnerability

django/django · GHSA-9jmf-237g-qf46

high2024-07-10

CVE-2024-21522-audify vulnerable to Improper Validation of Array Index

almoghamdani/audify · GHSA-7vhm-fmph-7wxw

high2024-07-10

CVE-2024-21521-@discordjs/opus vulnerable to Denial of Service

discordjs/opus · GHSA-43wq-xrcm-3vgr

high2024-07-10

CVE-2024-36676-BookStack Incorrect Access Control vulnerability

bookstackapp/bookstack · GHSA-pj36-fcrg-327j

medium2024-07-09

CVE-2024-39031-Silverpeas Core Cross-site Scripting vulnerability

silverpeas/silverpeas-core · GHSA-vfwh-gvf6-mff8

high2024-07-09

CVE-2024-38095-Microsoft Security Advisory CVE-2024-38095 | .NET Denial of Service Vulnerability

dotnet/runtime · GHSA-447r-wph3-92pm

high2024-07-09

CVE-2024-38081-Microsoft Security Advisory CVE-2024-38081 | .NET Elevation of Privilege Vulnerability

dotnet/runtime · GHSA-hq7w-xv5x-g34j