Security advisories

critical2024-05-21

CVE-2024-35056-NASA AIT-Core vulnerable to SQL Injection

nasa-ammos/ait-core · GHSA-gpgj-xrgw-8mx2

critical2024-05-21

CVE-2024-35058-NASA AIT-Core vulnerable to remote code execution

nasa-ammos/ait-core · GHSA-4gxj-5mmr-7pxq

critical2024-05-21

CVE-2024-36039-PyMySQL SQL Injection vulnerability

pymysql/pymysql · GHSA-v9hf-5j83-6xpp

medium2024-05-21

sensiolabs/connect has a Cross-Site Request Forgery Vulnerability

symfonycorp/connect · GHSA-6wqp-7g94-f69j

high2024-05-21

scheb/two-factor-bundle bypass two-factor authentication with remember-me option

scheb/two-factor-bundle · GHSA-9phw-7h96-q3rv

high2024-05-21

scheb/two-factor-bundle bypass two-factor authentication with unverified JWT trusted device token

scheb/two-factor-bundle · GHSA-h6mp-mc7g-mg49

high2024-05-21

CVE-2024-35220-@fastify/session reuses destroyed session cookie

fastify/session · GHSA-pj27-2xvp-4qxg

critical2024-05-21

CVE-2024-31989-ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache

argoproj/argo-cd · GHSA-9766-5277-j5hr

medium2024-05-21

CVE-2024-4435-ic-stable-structures vulnerable to BTreeMap memory leak when deallocating nodes with overflows

dfinity/stable-structures · GHSA-3rcq-39xp-7xjp

medium2024-05-21

CVE-2024-35218-Umbraco CMS Vulnerable to Stored XSS on Content Page Through Markdown Editor Preview Pane

umbraco/umbraco-cms · GHSA-gvpc-3pj6-4m9w

medium2024-05-21

CVE-2024-1727-Gradio applications running locally vulnerable to 3rd party websites accessing routes and uploading files

gradio-app/gradio · GHSA-48cq-79qq-6f7x

medium2024-05-21

CVE-2024-35180-OMERO.web must check that the JSONP callback is a valid function

ome/omero-web · GHSA-vr85-5pwx-c6gq

medium2024-05-21

CVE-2024-34071-Umbraco CMS Open Redirect Bypass Protection

umbraco/umbraco-cms · GHSA-j74q-mv2c-rxmp

low2024-05-20

github.com/bincyber/go-sqlcrypter vulnerable to IV collision

bincyber/go-sqlcrypter · GHSA-2j6r-9vv4-6gf5

medium2024-05-20

github.com/cosmos/ibc-go affected by IBC protocol "Huckleberry" vulnerability

cosmos/ibc-go · GHSA-qjcv-rx3v-7mvj

medium2024-05-20

CVE-2024-35194-Stacklok Minder vulnerable to denial of service from maliciously crafted templates

stacklok/minder · GHSA-crgc-2583-rw27

medium2024-05-20

CVE-2024-35192-Trivy possibly leaks registry credential when scanning images from malicious registries

aquasecurity/trivy · GHSA-xcq4-m2r3-cmrj

medium2024-05-20

CVE-2024-35191-verbb/formie Server-Side Template Injection for variable-enabled settings

verbb/formie · GHSA-v45m-hxqp-fwf5

medium2024-05-20

CVE-2024-35195-Requests `Session` object does not verify requests after making first request with verify=False

psf/requests · GHSA-9wx4-h78v-vm56

medium2024-05-20

CVE-2024-34899-AVideo cross-site scripting vulnerability in the view/about.php page

wwbn/avideo · GHSA-f98p-2hc5-fm7v