Security advisories

high2024-06-04

CVE-2024-37060-MLFlow unsafe deserialization

mlflow/mlflow · GHSA-cv6c-7963-wxcg

high2024-06-04

CVE-2024-37064-ydata unsafe deserialization

ydataai/ydata-profiling · GHSA-cg49-hrj4-3rpr

high2024-06-04

CVE-2024-37063-ydata cross-site scripting

ydataai/ydata-profiling · GHSA-2r57-2mrh-ggjv

high2024-06-04

CVE-2024-37055-MLFlow unsafe deserialization

mlflow/mlflow · GHSA-x38x-g6gr-jqff

high2024-06-04

CVE-2024-37054-MLFlow unsafe deserialization

mlflow/mlflow · GHSA-ghv6-9r9j-wh4j

high2024-06-04

CVE-2024-37056-MLFlow unsafe deserialization

mlflow/mlflow · GHSA-7p8j-qv6x-f4g4

high2024-06-04

CVE-2024-37052-MLFlow unsafe deserialization

mlflow/mlflow · GHSA-76cg-cfhx-373f

high2024-06-04

CVE-2024-37053-MLFlow unsafe deserialization

mlflow/mlflow · GHSA-43c4-9qgj-x742

medium2024-06-03

CVE-2024-34051-Reflected Cross-Site Scripting (XSS) in Dolibarr

dolibarr/dolibarr · GHSA-hv2j-6654-x74q

medium2024-06-03

Cross-Site Scripting in TYPO3 component Indexed Search

typo3/typo3 · GHSA-wh8q-72cp-p5wf

medium2024-06-03

TYPO3 is susceptible to Cross-Site Flashing

typo3/typo3 · GHSA-qrxh-46mr-pr7q

critical2024-06-03

CVE-2024-3829-qdrant input validation failure

qdrant/qdrant-client · GHSA-7m75-x27w-r52r

critical2024-06-03

CVE-2024-36042-Silverpeas authentication bypass

silverpeas/silverpeas-core · GHSA-4w54-wwc9-x62c

low2024-06-02

CVE-2024-22261-SQL Injection in Harbor scan log API

goharbor/harbor · GHSA-vw63-824v-qf2j

medium2024-06-02

CVE-2024-22244-Open Redirect URL in Harbor

goharbor/harbor · GHSA-5757-v49g-f6r7

high2024-06-02

CVE-2024-37031-activeadmin vulnerable to stored persistent cross-site scripting (XSS) in dynamic form legends

activeadmin/activeadmin · GHSA-9mg6-x45v-hcfm

low2024-06-02

CVE-2024-36119-Password confirmation stored in plain text via registration form in statamic/cms

statamic/cms · GHSA-qvpj-w7xj-r6w9

high2024-06-02

CVE-2024-4990-Unsafe Reflection in base Component class in yiisoft/yii2

yiisoft/yii2 · GHSA-cjcc-p67m-7qxm

medium2024-06-02

CVE-2024-4330-path traversal vulnerability was identified in the parisneo/lollms-webui

parisneo/lollms · GHSA-9p73-x86v-jw57

medium2024-06-02

CVE-2024-3924-code injection vulnerability exists in the huggingface/text-generation-inference repository

huggingface/text-generation-inference · GHSA-qq99-p57r-g3v7