Security advisories

medium2024-07-02

CVE-2024-6382-MongoDB Rust driver may issue unintended commands

mongodb/mongo-rust-driver · GHSA-32jf-h775-g29h

medium2024-07-02

CVE-2024-39322-aimeos/ai-admin-jsonadm improper access control vulnerability allows editors to remove required records

aimeos/ai-admin-jsonadm · GHSA-8fj2-587w-5whr

low2024-07-02

CVE-2024-39324-aimeos/ai-admin-graphql improper access control vulnerability allows editors to manage own services

aimeos/ai-admin-graphql · GHSA-jj68-cp4v-98qf

high2024-07-02

CVE-2024-39323-aimeos/ai-admin-graphql improper access control vulnerability allows an editor to modify admin account

aimeos/ai-admin-graphql · GHSA-vc7j-99jw-jrqm

low2024-07-02

CVE-2024-38537-Inclusion of Untrusted polyfill.io Code Vulnerability in fides.js

ethyca/fides · GHSA-cvw4-c69g-7v7m

high2024-07-02

CVE-2024-38519-yt-dlp File system modification and RCE through improper file-extension sanitization

yt-dlp/yt-dlp · GHSA-79w7-vh3h-8g4j

low2024-07-01

CVE-2024-39303-Weblate vulnerable to improper sanitization of project backups

weblateorg/weblate · GHSA-jfgp-674x-6q4p

high2024-07-01

CVE-2024-37298-Potential memory exhaustion attack due to sparse slice deserialization

gorilla/schema · GHSA-3669-72x9-r9p3

critical2024-07-01

CVE-2024-38513-Session Middleware Token Injection Vulnerability

gofiber/fiber · GHSA-98j2-3j3p-fw2v

critical2024-07-01

CVE-2024-36401-Remote Code Execution (RCE) vulnerability in geoserver

geoserver/geoserver · GHSA-6jj6-gm7p-fcvv

high2024-07-01

CVE-2024-24749-Classpath resource disclosure in GWC Web Resource API on Windows / Tomcat

geoserver/geoserver · GHSA-jhqx-5v5g-mpf3

medium2024-07-01

CVE-2024-34696- GeoServer's Server Status shows sensitive environmental variables and Java properties

geoserver/geoserver · GHSA-j59v-vgcr-hxvf

critical2024-07-01

CVE-2024-39309-ZDI-CAN-23894: Parse Server literalizeRegexPart SQL Injection Authentication Bypass Vulnerability

parse-community/parse-server · GHSA-c2hr-cqg6-8j6r

high2024-07-01

CVE-2024-6376-ejson shell parser in MongoDB Compass maybe bypassed

mongodb-js/compass · GHSA-jxr4-4prv-mh83

medium2024-07-01

CVE-2024-39018-@cat5th/key-serializer Prototype Pollution vulnerability

harvey-woo/key-serializer · GHSA-whpx-g542-7c7v

high2024-07-01

CVE-2024-39008-robinweser fast-loops vulnerable to prototype pollution

robinweser/fast-loops · GHSA-3q56-9cc2-46j4

medium2024-07-01

CVE-2024-39001-ag-grid packages vulnerable to Prototype Pollution

ag-grid/ag-grid · GHSA-328p-362g-r48j

high2024-07-01

CVE-2024-38999-jrburke requirejs vulnerable to prototype pollution

requirejs/r.js · GHSA-x3m3-4wpv-5vgc

medium2024-07-01

CVE-2024-38997-adolph_dudu ratio-swiper was discovered to contain a prototype pollution via the function extendDefaults

adophlidu/swiper · GHSA-88vr-hjqx-57qh

high2024-07-01

CVE-2024-38996-Prototype pollution in ag-grid-community via the _.mergeDeep function

ag-grid/ag-grid · GHSA-876p-c77m-x2hc