Security advisories

medium2024-05-23

Silverstripe XSS in TreeDropdownField and TreeMultiSelectField

silverstripe/silverstripe-framework · GHSA-r32j-mr8p-hfp8

medium2024-05-23

SilverStripe framework XML Quadratic Blowup Attack

silverstripe/silverstripe-framework · GHSA-g43w-98wp-m694

medium2024-05-23

Silverstripe IE requests not properly behaving with rewritehashlinks

silverstripe/silverstripe-framework · GHSA-5f5v-5c3v-gw5v

medium2024-05-23

Silverstripe Forum Module CSRF Vulnerability

silverstripe-archive/silverstripe-forum · GHSA-w8fq-xgvh-cxc2

medium2024-05-23

CVE-2024-35222-iFrames Bypass Origin Checks for Tauri API Access Control

tauri-apps/tauri · GHSA-57fm-592m-34r7

medium2024-05-23

CVE-2024-28188-jupyter-scheduler's endpoint is missing authentication

jupyter-server/jupyter-scheduler · GHSA-v9g2-g7j4-4jxc

medium2024-05-23

CVE-2024-5165-Eclipse Ditto vulnerable to Cross-site Scripting

eclipse-ditto/ditto · GHSA-hjfc-6jxr-j2rx

critical2024-05-22

CVE-2024-25738-VuFind Server-Side Request Forgery (SSRF) vulnerability

vufind-org/vufind · GHSA-wx24-vqrg-m6m5

critical2024-05-22

CVE-2024-25737-VuFind Server-Side Request Forgery (SSRF) vulnerability

vufind-org/vufind · GHSA-fwhc-mm9q-mqq8

high2024-05-22

Silverstripe SiteTree Creation Permission Vulnerability

silverstripe/silverstripe-cms · GHSA-3mm9-2p44-rw39

medium2024-05-22

Silverstripe XSS vulnerability via VirtualPage

silverstripe/silverstripe-cms · GHSA-r97r-64vp-fghm

medium2024-05-22

CVE-2024-35223-Dapr API Token Exposure

dapr/dapr · GHSA-284c-x8m7-9w5h

high2024-05-22

CVE-2024-34448-Ghost allows CSV Injection during member CSV export

tryghost/ghost · GHSA-xgwh-cgv9-783v

medium2024-05-22

CVE-2024-29392-Silverpeas Core vulnerable to Cross Site Scripting

silverpeas/silverpeas-core · GHSA-9rrw-82r2-623p

medium2024-05-22

Silverstripe History XSS Vulnerability

silverstripe/silverstripe-cms · GHSA-6hh6-59j2-qrxw

low2024-05-22

Silverstripe admin XSS Vulnerability via WYSIWYG editor

silverstripe/silverstripe-admin · GHSA-779c-7w4p-2c4g

low2024-05-22

CVE-2024-32969-vantage6 collaboration admins can extend their influence by expanding the collaboration

vantage6/vantage6 · GHSA-99r4-cjp4-3hmx

medium2024-05-22

CVE-2024-35197-gix refs and paths with reserved Windows device names access the devices

byron/gitoxide · GHSA-49jc-r788-3fc9

high2024-05-22

CVE-2024-35186-gix traversal outside working tree enables arbitrary code execution

byron/gitoxide · GHSA-7w47-3wg8-547c

high2024-05-21

CVE-2024-35061-NASA AIT-Core uses unencrypted channels to exchange data over the network

nasa-ammos/ait-core · GHSA-qv6x-53jj-vw59