Security advisories

high2024-07-07

CVE-2024-40614-EGroupware mishandles an ORDER BY clause

egroupware/egroupware · GHSA-phg7-8mm9-gj88

high2024-07-06

CVE-2024-33862-OPCFoundation.NetStandard.Opc.Ua.Core buffer-management vulnerability

opcfoundation/ua-.netstandard · GHSA-4q2p-hwmr-qcxc

high2024-07-05

CVE-2024-5753-Vanna vulnerable to SQL Injection

vanna-ai/vanna · GHSA-mwxm-35f8-6vg2

medium2024-07-05

CVE-2024-31223-Information Disclosure Vulnerability in Privacy Center of SERVER_SIDE_FIDES_API_URL

ethyca/fides · GHSA-53q7-4874-24qg

high2024-07-05

CVE-2024-39321-Bypassing IP allow-lists in traefik via HTTP/3 early data requests in QUIC 0-RTT handshakes

traefik/traefik · GHSA-gxrv-wf35-62w9

medium2024-07-05

CVE-2024-39325-ai-controller-frontend payment status in basket isn't reset

aimeos/ai-controller-frontend · GHSA-m9gv-6p22-qgmj

medium2024-07-05

Panic in Pipeline when PgConn is busy or closed in github.com/jackc/pgx

jackc/pgx · GHSA-fqpg-rq76-99pq

medium2024-07-05

CVE-2024-39687-Server Side Request Forgery (SSRF) attack in Fedify

dahlia/fedify · GHSA-p9cg-vqcc-grcx

low2024-07-05

Private tokens could appear in logs if context containing gRPC metadata is logged in github.com/grpc/grpc-go

grpc/grpc-go · GHSA-xr7q-jx4m-x55m

low2024-07-05

CVE-2024-39689-Certifi removes GLOBALTRUST root certificate

certifi/python-certifi · GHSA-248v-346w-9cwc

medium2024-07-05

CVE-2024-39691-Malicious Matrix homeserver can leak truncated message content of messages it shouldn't have access to

matrix-org/matrix-appservice-irc · GHSA-w9mh-5x8j-9754

medium2024-07-05

CVE-2024-39683-ZITADEL Vulnerable to Session Information Leakage

zitadel/zitadel · GHSA-cvw9-c57h-3397

medium2024-07-05

CVE-2025-47908-Denial of service via malicious preflight requests in github.com/rs/cors

rs/cors · GHSA-mh55-gqvf-xfwm

medium2024-07-05

CVE-2024-39315-Pomerium exposed OAuth2 access and ID tokens in user info endpoint response

pomerium/pomerium · GHSA-rrqr-7w59-637v

medium2024-07-05

CVE-2024-6524-ShopXO Server-Side Request Forgery Vulnerability

gongfuxiang/shopxo · GHSA-c96r-38gv-grp4

high2024-07-05

CVE-2024-39943-rejetto HFS vulnerable to OS Command Execution by remote authenticated users

rejetto/hfs · GHSA-5f4x-hwv2-w9w2

medium2024-07-04

CVE-2024-6284-github.com/google/nftable IP addresses were encoded in the wrong byte order

google/nftables · GHSA-qjvf-8748-9w7h

high2024-07-03

CVE-2024-34750-Apache Tomcat - Denial of Service

apache/tomcat · GHSA-wm9w-rjj3-j356

critical2024-07-03

CVE-2024-39223-Missing key verification in gost

ginuerzh/gost · GHSA-8wxx-35qc-vp6r

medium2024-07-03

CVE-2024-39316-Rack ReDoS Vulnerability in HTTP Accept Headers Parsing

rack/rack · GHSA-cj83-2ww7-mvq7