Security advisories

medium2024-06-13

CVE-2024-37309-CrateDB has a Client initialized Session-Renegotiation DoS

crate/crate · GHSA-x268-qpg6-w9g2

high2024-06-13

CVE-2024-37307-Cilium leaks sensitive information in cilium-bugtool

cilium/cilium · GHSA-wh78-7948-358j

high2024-06-13

CVE-2024-36760-Rhai stack overflow vulenrability

rhaiscript/rhai · GHSA-67fv-9r7g-432h

medium2024-06-13

CVE-2024-37280-Elasticsearch StackOverflow vulnerability

elastic/elasticsearch · GHSA-4q22-422g-m4pj

medium2024-06-13

CVE-2024-34111-Magento Open Source Server-Side Request Forgery (SSRF) vulnerability

magento/magento2 · GHSA-jmqp-r3gg-6jh3

high2024-06-13

CVE-2024-34104-Magento Open Source Improper Authorization vulnerability

magento/magento2 · GHSA-wwj3-573j-rvvm

medium2024-06-13

CVE-2024-34107-Magento Open Source Improper Access Control vulnerability

magento/magento2 · GHSA-r7cm-g469-wm4g

medium2024-06-13

CVE-2024-34106-Magento Open Source Incorrect Authorization vulnerability

magento/magento2 · GHSA-p6h9-gx5g-wg64

critical2024-06-13

CVE-2024-34102-Magento Open Source affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability

magento/magento2 · GHSA-m8cj-3v68-3cxj

critical2024-06-13

CVE-2024-34103-Magento Open Source Improper Authentication vulnerability

magento/magento2 · GHSA-f7q4-9gwv-6774

medium2024-06-13

CVE-2024-34105-Magento Open Source Cross-Site Scripting (XSS) vulnerability

magento/magento2 · GHSA-5632-wq7m-gfq9

low2024-06-12

CVE-2024-5798-HashiCorp Vault Incorrectly Validated JSON Web Tokens (JWT) Audience Claims

hashicorp/vault · GHSA-32cj-5wx4-gq8p

medium2024-06-12

CVE-2023-49559-gqlparser denial of service vulnerability via the parserDirectives function

vektah/gqlparser · GHSA-2hmf-46v7-v6fx

medium2024-06-12

Invenio-Communities has a Cross-Site Scripting (XSS) vulnerability in React components

inveniosoftware/invenio-communities · GHSA-hjx6-f647-mvf9

low2024-06-12

CVE-2024-1722-Keycloak Denial of Service via account lockout

keycloak/keycloak · GHSA-cq42-vhv7-xr7p

low2024-06-12

CVE-2021-3754-Keycloak's improper input validation allows using email as username

keycloak/keycloak · GHSA-4vc8-pg5c-vg4x

medium2024-06-12

CVE-2024-37297-WooCommerce has a Cross-Site Scripting (XSS) Vulnerability in checkout & registration forms

woocommerce/woocommerce · GHSA-cv23-q6gh-xfrf

high2024-06-12

CVE-2024-34065-@strapi/plugin-users-permissions leaks 3rd party authentication tokens and authentication bypass

strapi/strapi · GHSA-wrvh-rcmr-9qfc

medium2024-06-12

CVE-2024-31217-@strapi/plugin-upload has a Denial-of-Service via Improper Exception Handling

strapi/strapi · GHSA-pm9q-xj9p-96pm

low2024-06-12

CVE-2024-29181-@strapi/plugin-content-manager leaks data via relations via the Admin Panel

strapi/strapi · GHSA-6j89-frxc-q26m