Security advisories

critical2024-06-22

CVE-2024-5443-Remote Code Execution via path traversal bypass in lollms

parisneo/lollms · GHSA-mvrm-fh8q-6wr2

high2024-06-22

CVE-2024-21518-Zip slip in opencart

opencart/opencart · GHSA-m7r8-2r98-vppj

medium2024-06-22

CVE-2024-4940-Open redirect in gradio

gradio-app/gradio · GHSA-g6c9-f4xm-9j4x

high2024-06-22

CVE-2024-21519-Arbitrary File Creation in opencart

opencart/opencart · GHSA-7q3h-j95q-3vjh

medium2024-06-22

CVE-2024-21515-Cross site scripting in opencart

opencart/opencart · GHSA-qx44-885h-7p56

medium2024-06-22

CVE-2024-21517-Cross site scripting in opencart

opencart/opencart · GHSA-qc3q-8rr8-8p5v

medium2024-06-22

CVE-2024-21516-Cross site scripting in opencart

opencart/opencart · GHSA-pqhq-77pw-763c

high2024-06-22

CVE-2024-21514-SQL injection in opencart

opencart/opencart · GHSA-7crj-24g3-g7h7

low2024-06-21

CVE-2024-5967-Keycloak leaks configured LDAP bind credentials through the Keycloak admin console

keycloak/keycloak · GHSA-c25h-c27q-5qpv

medium2024-06-21

CVE-2024-38873-FriendlyCaptcha Plugin for TYPO3 Captcha Check Bypass

studiomitte/friendlycaptcha-typo3 · GHSA-jg62-h7pv-hxgv

medium2024-06-21

CVE-2024-38874-events2 TYPO3 extension insecure direct object reference (IDOR) vulnerability

jweiland-net/events2 · GHSA-cchp-3rq6-69wj

medium2024-06-21

CVE-2021-47621-ClassGraph XML External Entity Reference

classgraph/classgraph · GHSA-v2xm-76pq-phcf

high2024-06-20

CVE-2024-37818-Strapi Server-Side Request Forgery (SSRF)

strapi/strapi · GHSA-p9ff-j98v-p435

high2024-06-20

CVE-2024-38359-Lightning Network Daemon (LND)'s onion processing logic leads to a denial of service

lightningnetwork/lnd · GHSA-9gxx-58q6-42p7

high2024-06-20

CVE-2024-28397-js2py allows remote code execution

piotrdabkowski/js2py · GHSA-h95x-26f3-88hr

medium2024-06-20

CVE-2024-38361-SpiceDB exclusions can result in no permission returned when permission expected

authzed/spicedb · GHSA-grjv-gjgr-66g2

medium2024-06-20

ACME DNS: Azure Identity Libraries Elevation of Privilege Vulnerability

traefik/traefik · GHSA-rvj4-q8q5-8grf

critical2024-06-20

CVE-2024-37899-XWiki Platform allows remote code execution from user account

xwiki/xwiki-platform · GHSA-j584-j2vj-3f93

medium2024-06-20

CVE-2024-37897-SFTPGo has insufficient access control for password reset

drakkan/sftpgo · GHSA-hw5f-6wvv-xcrh

high2024-06-20

CVE-2024-6162-Undertow's url-encoded request path information can be broken on ajp-listener

undertow-io/undertow · GHSA-9442-gm4v-r222