Security advisories

high2024-07-01

CVE-2024-38992-frappejs was discovered to contain a prototype pollution via the function registerView

frappe/frappejs · GHSA-gc7m-596h-x57r

medium2024-07-01

CVE-2024-38987-@aofl/cli-lib Prototype Pollution vulnerability

ageoflearning/aofl · GHSA-vg6v-jcg3-5mp7

medium2024-06-30

CVE-2024-5062-Reflected Cross-Site Scripting (XSS) in zenml

zenml-io/zenml · GHSA-3434-hc3m-8mmm

critical2024-06-29

CVE-2019-25211-Gin mishandles a wildcard at the end of an origin string

gin-gonic/gin · GHSA-869c-j7wc-8jqv

high2024-06-28

CVE-2024-38528-Unlimited number of NTS-KE connections can crash ntpd-rs server

pendulum-project/ntpd-rs · GHSA-2xpx-vcmq-5f72

medium2024-06-28

CometBFT is unstability during blocksync when syncing from malicious peer

cometbft/cometbft · GHSA-hg58-rf2h-6rr7

high2024-06-28

CVE-2023-52892-Name confusion in x509 Subject Alternative Name fields

phpseclib/phpseclib · GHSA-ff7q-6vwh-v9m4

high2024-06-28

CVE-2024-39705-ntlk unsafe deserialization vulnerability

nltk/nltk · GHSA-cgvx-9447-vcch

high2024-06-27

CVE-2024-6139-lollms vulnerable to dot-dot-slash path traversal in XTTS server

parisneo/lollms · GHSA-w9qf-83jg-2x6c

critical2024-06-27

CVE-2024-5826-vanna vulnerable to remote code execution caused by prompt injection

vanna-ai/vanna · GHSA-rrqq-fv6m-692m

medium2024-06-27

CVE-2024-5710-litellm vulnerable to improper access control in team management

berriai/litellm · GHSA-qqcv-vg9f-5rr3

critical2024-06-27

CVE-2024-5980-pytorch-lightning vulnerable to Arbitrary File Write via /v1/runs API endpoint

lightning-ai/pytorch-lightning · GHSA-mr7h-w2qc-ffc2

high2024-06-27

CVE-2024-5824-lollms path traversal vulnerability allows overriding of config.yaml file, leading to RCE

parisneo/lollms · GHSA-m45c-v46h-c788

critical2024-06-27

CVE-2024-5751-litellm vulnerable to remote code execution based on using eval unsafely

berriai/litellm · GHSA-gppg-gqw8-wh9g

high2024-06-27

CVE-2024-6085-lollms vulnerable to path traversal due to unauthenticated root folder settings change

parisneo/lollms · GHSA-9chm-m6x2-6fvc

high2024-06-27

CVE-2024-5979-h2o vulnerable to unexpected POST request shutting down server

h2oai/h2o-3 · GHSA-58m3-rcvp-f9ww

medium2024-06-27

CVE-2024-22231-Directory creation by malicious user in saltstack

saltstack/salt · GHSA-q27c-j6j9-53w3

high2024-06-27

CVE-2024-22232-Path traversal in saltstack

saltstack/salt · GHSA-2qw3-2wv6-p64x

medium2024-06-26

CVE-2024-38375-@fastly/js-compute has a use-after-free in some host call implementations

fastly/js-compute-runtime · GHSA-mp3g-vpm9-9vqv

medium2024-06-26

CVE-2024-38527-Cross-site Scripting in ZenUML

mermaid-js/zenuml-core · GHSA-q6xv-jm4v-349h