Security advisories

medium2024-06-17

CVE-2024-37891-urllib3's Proxy-Authorization request header isn't stripped during cross-origin redirects

urllib3/urllib3 · GHSA-34jh-p97f-mpxf

high2024-06-17

CVE-2024-36543-STRIMZI incorrect access control

strimzi/strimzi-kafka-operator · GHSA-q2xx-f8r3-9mg5

high2024-06-17

CVE-2024-34694-LNbits improperly handles potential network and payment failures when using Eclair backend

lnbits/lnbits · GHSA-3j4h-h3fp-vwww

critical2024-06-17

CVE-2024-37902-DeepJavaLibrary API absolute path traversal

deepjavalibrary/djl · GHSA-w877-jfw7-46rj

high2024-06-17

CVE-2024-37890-ws affected by a DoS when handling a request with many HTTP headers

websockets/ws · GHSA-3h5v-q93c-6h6q

medium2024-06-17

CVE-2024-36578-@akbr/update Prototype Pollution

akbr/update · GHSA-mj4p-gmhr-92g3

high2024-06-17

CVE-2024-36577-Object Resolver Prototype Pollution

apphp/js-object-resolver · GHSA-qj86-v6m7-4qv2

critical2024-06-17

CVE-2024-36573-obx Prototype Pollution

llgaetanll/obx · GHSA-jj58-488v-4rgf

medium2024-06-17

CVE-2024-36574-flatten-json Prototype Pollution

allanlancioni/flatten-json · GHSA-j8px-pjmp-325f

high2024-06-17

CVE-2024-36581-Badger Database Prototype Pollution

abw/badger-database-js · GHSA-69r2-2fg7-7hf9

medium2024-06-17

CVE-2024-36582-object-deep-assign Prototype Pollution

alexbinary/object-deep-assign · GHSA-4xg3-7w7q-856q

medium2024-06-17

CVE-2024-36580-@cdr0/sg Prototype Pollution

briancsparks/cdr0-sg · GHSA-fg52-5jjj-28h7

high2024-06-16

CVE-2024-38459-langchain_experimental Code Execution via Python REPL access

langchain-ai/langchain · GHSA-wmvm-9vqv-5qpp

medium2024-06-16

CVE-2024-38460-SonarQube logs sensitive information

sonarsource/sonarqube · GHSA-hw2c-8xgw-mf57

high2024-06-14

CVE-2024-5685-Snipe-IT allows users to promote or demote themselves or other users

snipe/snipe-it · GHSA-544r-fc65-v832

low2024-06-14

CVE-2024-36287-Mattermost Desktop App allows for bypassing TCC restrictions on macOS

mattermost/desktop · GHSA-xgqm-wp7w-mgg2

medium2024-06-14

CVE-2024-37182-Mattermost Desktop App Remote Code Execution

mattermost/desktop · GHSA-hvxg-77mg-vrvp

low2024-06-14

CVE-2024-25142-Apache Airflow does not return the "Cache-Control" header for dynamic content

apache/airflow · GHSA-9xpj-62mm-24h2

high2024-06-13

CVE-2024-36586-AdGuardHome privilege escalation vulnerability

adguardteam/adguardhome · GHSA-7jp9-vgmq-c8r5

high2024-06-13

Vulnerabilities with the k8sGPT

k8sgpt-ai/k8sgpt · GHSA-85rg-8m6h-825p