Security advisories

critical2024-07-09

CVE-2024-35264-Microsoft Security Advisory CVE-2024-35264 | .NET Remote Code Execution Vulnerability

dotnet/aspnetcore · GHSA-chfc-9w6m-75rf

high2024-07-09

CVE-2024-30105-Microsoft Security Advisory CVE-2024-30105 | .NET Denial of Service Vulnerability

dotnet/runtime · GHSA-hh2w-p6rv-4g7w

medium2024-07-09

CVE-2024-39897-Cache driver GetBlob() allows read access to any blob without access control check

project-zot/zot · GHSA-55r9-5mx9-qq7r

high2024-07-09

CVE-2024-39698-electron-updater Code Signing Bypass on Windows

electron-userland/electron-builder · GHSA-9jxc-qjr9-vjxq

high2024-07-09

CVE-2024-22271-Spring Cloud Function Framework vulnerable to Denial of Service

spring-cloud/spring-cloud-function · GHSA-j4r7-p9fp-w3f3

critical2024-07-09

CVE-2024-39697-panic on parsing crafted phonenumber inputs

whisperfish/rust-phonenumber · GHSA-mjw4-jj88-v687

low2024-07-09

CVE-2024-38372-Undici vulnerable to data leak when using response.arrayBuffer()

nodejs/undici · GHSA-3g92-w8c5-73pq

medium2024-07-09

CVE-2024-5569-zipp Denial of Service vulnerability

jaraco/zipp · GHSA-jfmj-5v4g-7637

medium2024-07-09

CVE-2024-3653-Undertow Missing Release of Memory after Effective Lifetime vulnerability

undertow-io/undertow · GHSA-ch7q-gpff-h9hp

high2024-07-08

CVE-2024-5971-Undertow Denial of Service vulnerability

undertow-io/undertow · GHSA-xpp6-8r3j-ww43

high2024-07-08

CVE-2024-6227-Aim denial of service vulnerability

aimhubio/aim · GHSA-36h2-g4c8-9xcm

high2024-07-08

CVE-2024-39896-Directus Allows Single Sign-On User Enumeration

directus/directus · GHSA-jgf4-vwc3-r46v

high2024-07-08

CVE-2024-39895-Directus GraphQL Field Duplication Denial of Service (DoS)

directus/directus · GHSA-7hmh-pfrp-vcx4

high2024-07-08

CVE-2024-39701-Directus incorrectly handles `_in` filter

directus/directus · GHSA-hxgm-ghmv-xjjm

medium2024-07-08

CVE-2024-39699-Directus Blind SSRF On File Import

directus/directus · GHSA-8p72-rcq4-h6pw

medium2024-07-08

Khoj Open Redirect Vulnerability in Login Page

khoj-ai/khoj · GHSA-564j-v29w-rqr6

low2024-07-08

yt-dlp has dependency on potentially malicious third-party code in Douyu extractors

yt-dlp/yt-dlp · GHSA-3v33-3wmw-3785

high2024-07-08

CVE-2024-39677-NHibernate SQL injection vulnerability in discriminator mappings, static fields referenced in HQL, and some utilities

nhibernate/nhibernate-core · GHSA-fg4q-ccq8-3r5q

medium2024-07-08

CVE-2024-39308-RailsAdmin Cross-site Scripting vulnerability in the list view

railsadminteam/rails_admin · GHSA-8qgm-g2vv-vwvc

medium2024-07-08

CVE-2024-37389-Apache NiFi vulnerable to Cross-site Scripting

apache/nifi · GHSA-h658-qqv9-qwv8