Security advisories

medium2024-06-05

Cross-Site Scripting in TYPO3 CMS

typo3/typo3 · GHSA-5gr6-97fv-52cc

high2024-06-05

Observable Timing Discrepancy in pypqc

jamestheawesomedude/pypqc · GHSA-hvh4-5qr6-3v7r

high2024-06-05

CVE-2024-36129-Denial of Service via Zip/Decompression Bomb sent over HTTP or gRPC

open-telemetry/opentelemetry-collector · GHSA-c74f-6mfw-mm4v

medium2024-06-05

CVE-2024-36121-BoringSSLAEADContext in Netty Repeats Nonces

netty/netty-incubator-codec-ohttp · GHSA-g762-h86w-8749

medium2024-06-05

Authentication Bypass in TYPO3 CMS

typo3/typo3 · GHSA-6f9m-v7mp-7jjq

medium2024-06-05

Information Disclosure in TYPO3 CMS

typo3/typo3 · GHSA-g46h-v2cc-6c94

medium2024-06-05

CVE-2024-5629-PyMongo Out-of-bounds Read in the bson module

mongodb/mongo-python-driver · GHSA-m87m-mmvp-v9qm

low2024-06-05

Information Disclosure in TYPO3 CMS

typo3/typo3 · GHSA-c7p6-3c9c-f88q

high2024-06-05

Privilege Escalation & SQL Injection in TYPO3 CMS

typo3/typo3 · GHSA-7qwg-fcpw-xg5g

high2024-06-05

TYPO3 Remote Code Execution in third party library swiftmailer

typo3/typo3 · GHSA-g4pf-3jvq-2gcw

critical2024-06-05

Arbitrary Code Execution in TYPO3 CMS

typo3/typo3 · GHSA-67wg-6j7r-mqh8

high2024-06-05

Insecure Deserialization in TYPO3 CMS

typo3/typo3 · GHSA-8h28-f46f-m87h

medium2024-06-05

Cross-Site Scripting (XSS) vulnerability in typolinks

typo3/typo3 · GHSA-p5c5-gmj4-g48f

medium2024-06-05

Cross-Site Scripting (XSS) in TYPO3 Backend

typo3/typo3 · GHSA-hq37-rfjc-mr8h

medium2024-06-05

Cross-Site Scripting in TYPO3 Backend

typo3/typo3 · GHSA-86r8-4g3w-7xjp

low2024-06-05

Arbitrary JavaScript execution due to using outdated libraries

freddyaboulton/gradio-pdf · GHSA-4m3g-6r7g-jv4f

medium2024-06-05

CVE-2024-37296-Digital products download without proper payment status check

aimeos/ai-client-html · GHSA-v4g2-cm5v-cxv7

high2024-06-05

CVE-2024-37295-Remote code execution in web server context

aimeos/aimeos-core · GHSA-rhc2-23c2-ww7c

medium2024-06-05

CVE-2024-37169-Arbitrary file read via Playwright's screenshot feature exploiting file wrapper

jasonraimondi/url-to-png · GHSA-665w-mwrr-77q3

medium2024-06-05

Vulnerable embedded jQuery Version

pimcore/admin-ui-classic-bundle · GHSA-jmh9-6rjq-gjh9