Security advisories

critical2024-06-05

CVE-2024-5262-Files or Directories Accessible to External Parties in ProjectDiscovery

projectdiscovery/interactsh · GHSA-q5mg-pc7r-r8cr

medium2024-06-04

CVE-2024-28103-Missing security headers in Action Pack on non-HTML responses

rails/rails · GHSA-fwhr-88qx-h9g7

medium2024-06-04

CVE-2024-32464-ActionText ContentAttachment can Contain Unsanitized HTML

rails/rails · GHSA-prjp-h48f-jgf6

critical2024-06-04

CVE-2024-37273-Jan path traversal vulnerability

janhq/jan · GHSA-878h-rqcq-mv3x

critical2024-06-04

CVE-2024-36858-Jan path traversal vulnerability

janhq/jan · GHSA-qfjh-mvq6-c5p8

high2024-06-04

CVE-2024-36857-Jan path traversal vulnerability

janhq/jan · GHSA-5jqc-qj57-4hrc

critical2024-06-04

CVE-2024-36400-Unable to generate the correct character set

viz-rs/nano-id · GHSA-9hc7-6w9r-wj94

high2024-06-04

CVE-2024-5154-malicious container creates symlink "mtab" on the host External

cri-o/cri-o · GHSA-j9hf-98c3-wrm8

high2024-06-04

CVE-2024-36128-Directus is soft-locked by providing a string value to random string util

directus/directus · GHSA-632p-p495-25m5

high2024-06-04

CVE-2024-36127-apko Exposure of HTTP basic auth credentials in log output

chainguard-dev/apko · GHSA-v6mg-7f7p-qmqp

medium2024-06-04

CVE-2024-36124-iq80 Snappy out-of-bounds read when uncompressing data, leading to JVM crash

dain/snappy · GHSA-8wh2-6qhj-h7j9

high2024-06-04

CVE-2024-32871-Flooding Server with Thumbnail files

pimcore/pimcore · GHSA-277c-5vvj-9pwx

high2024-06-04

CVE-2024-36120-javascript-deobfuscator crafted payload can lead to code execution

ben-sb/javascript-deobfuscator · GHSA-9p6p-8v9r-8c9m

medium2024-06-04

Cross-Site Scripting (XSS) in TYPO3 component Backend

typo3/typo3 · GHSA-3jxq-5xhh-9jr3

high2024-06-04

CVE-2024-37065-Skops unsafe deserialization

skops-dev/skops · GHSA-q49c-6v6g-wgq3

high2024-06-04

CVE-2024-37059-MLFlow unsafe deserialization

mlflow/mlflow · GHSA-wf7f-8fxf-xfxc

high2024-06-04

CVE-2024-37061-MLFlow improper input validation

mlflow/mlflow · GHSA-pqcv-qw2r-r859

high2024-06-04

CVE-2024-37057-MLFlow unsafe deserialization

mlflow/mlflow · GHSA-j8mg-pqc5-x9gj

high2024-06-04

CVE-2024-37062-ydata unsafe deserialization

ydataai/ydata-profiling · GHSA-fpvj-m2h6-6wc5

high2024-06-04

CVE-2024-37058-MLFlow unsafe deserialization

mlflow/mlflow · GHSA-cwgg-w6mp-w9hg