Security advisories

low2024-05-29

CVE-2024-34715-Fides Webserver Logs Hosted Database Password Partial Exposure Vulnerability

ethyca/fides · GHSA-8cm5-jfj2-26q7

medium2024-05-29

CVE-2024-37294-Aimeos denial of service vulnerability in SaaS and marketplace setups

aimeos/aimeos-core · GHSA-xjm6-jfmg-qc6p

critical2024-05-29

Swiftmailer Sendmail transport arbitrary shell execution

swiftmailer/swiftmailer · GHSA-4qpj-gxxg-jqg4

medium2024-05-29

stormpath/sdk uses Insecure Random Number Generator

stormpath/stormpath-sdk-php · GHSA-q8fc-v85f-78pw

medium2024-05-29

ScnSocialAuth Cross-site Scripting vulnerability in login redirect param

socalnick/scnsocialauth · GHSA-g6f5-4w43-2x63

high2024-05-28

CVE-2024-36110-ansibleguy-webui Cross-site Scripting vulnerability

ansibleguy/webui · GHSA-927p-xrc2-x2gj

medium2024-05-28

CVE-2022-4969-rockhopper Buffer Overflow vulnerability

bwoodsend/rockhopper · GHSA-4r4c-66gf-g9g5

medium2024-05-28

CVE-2024-36105-dbt allows Binding to an Unrestricted IP Address via socketsocket

dbt-labs/dbt-core · GHSA-pmrx-695r-4349

medium2024-05-28

CVE-2024-35240-Umbraco Commerce vulnerable to Stored Cross-site Scripting on Print Functionality

umbraco/umbraco.commerce.issues · GHSA-rpj9-xjwm-wr6w

medium2024-05-28

SimpleSAMLphp Reflected Cross-site Scripting vulnerability

simplesamlphp/simplesamlphp · GHSA-vpr3-cw3h-prw8

low2024-05-28

CVE-2024-35239-Umbraco Forms components vulnerable to Stored Cross-site Scripting

umbraco/umbraco.forms.issues · GHSA-p572-p2rj-q5f4

critical2024-05-28

CVE-2024-35374-Mocodo vulnerable to SQL injection in `/web/generate.php`

laowantong/mocodo · GHSA-j6cv-98jx-mrwr

medium2024-05-28

SimpleSAMLphp exposes credentials in session storage

simplesamlphp/simplesamlphp · GHSA-7wh8-jrq7-p27f

medium2024-05-28

SimpleSAMLphp Link Injection vulnerability

simplesamlphp/simplesamlphp · GHSA-v858-922f-fj9v

high2024-05-28

silverstripe/subsites Unsafe SQL Query Construction (Safe Data Source)

silverstripe/silverstripe-subsites · GHSA-xc69-p8fc-m6m5

high2024-05-28

silverstripe/taxonomy SQL Injection vulnerability

silverstripe/silverstripe-taxonomy · GHSA-p2v5-xcqm-4fv6

medium2024-05-28

silverstripe/userforms file upload exposure on UserForms module

silverstripe/silverstripe-userforms · GHSA-55pp-293f-3365

medium2024-05-28

CVE-2024-35238-Denial of service of Minder Server from maliciously crafted GitHub attestations

stacklok/minder · GHSA-8fmj-33gw-g7pw

medium2024-05-28

CVE-2024-35621-formwork Cross-site scripting vulnerability in Markdown fields

getformwork/formwork · GHSA-gx8m-f3mp-fg99

high2024-05-28

CVE-2024-35231-rack-contrib vulnerable to Denial of Service due to the unconstrained value of the incoming "profiler_runs" parameter

rack/rack-contrib · GHSA-8c8q-2xw3-j869