Security advisories

high2024-05-20

CVE-2024-24293-MiguelCastillo @bit/loader Prototype Pollution issue

miguelcastillo/bit-loader · GHSA-8vr4-h4rr-8ph6

high2024-05-20

CVE-2024-29651-json-schema-ref-parser Prototype Pollution issue

apidevtools/json-schema-ref-parser · GHSA-5f97-h2c2-826q

critical2024-05-20

CVE-2024-24294-Blackprint @blackprint/engine Prototype Pollution issue

blackprint/engine-js · GHSA-g3q2-vcjq-rgrc

high2024-05-20

robrichards/xmlseclibs XPath injection

robrichards/xmlseclibs · GHSA-2g98-f9jv-w8c5

medium2024-05-20

Pusher Service Channel Authentication Bypass

pusher/pusher-http-php · GHSA-7v7m-pcw5-h3cg

critical2024-05-20

propel/propel1 SQL injection possible with limit() on MySQL

propelorm/propel · GHSA-7g7c-qhf3-x59p

critical2024-05-20

Propel2 SQL injection possible with limit() on MySQL

propelorm/propel2 · GHSA-7vw7-qx38-37vr

medium2024-05-20

phpxmlrpc/extra XSS in class documenting_xmlrpc_server

gggeek/phpxmlrpc-extras · GHSA-ww6p-q26w-fr6m

medium2024-05-20

Passbolt Api Tabnabbing when opening URI with menu "Open URI in a new tab"

passbolt/passbolt_api · GHSA-qm5v-pj64-852j

high2024-05-20

Passbolt API Stored XSS on first/last name during setup

passbolt/passbolt_api · GHSA-2f46-4xjm-73x5

high2024-05-20

Passbolt Api Remote code execution

passbolt/passbolt_api · GHSA-cv5c-2qv5-w2m2

low2024-05-20

Passbolt Api Retrieval of HTTP-only cookies

passbolt/passbolt_api · GHSA-f5pp-pmq8-gp46

medium2024-05-20

Passbolt Api E-mail HTML injection

passbolt/passbolt_api · GHSA-v86m-j5f7-ccwh

medium2024-05-20

CVE-2024-34083-aiosmtpd STARTTLS unencrypted commands injection

aio-libs/aiosmtpd · GHSA-wgjv-9j3q-jhg8

high2024-05-20

CVE-2024-28109-veraPDF has potential XSLT injection vulnerability when using policy files

verapdf/verapdf-library · GHSA-qxqf-2mfx-x8jw

medium2024-05-20

OroPlatform Forced Redirect to External Website

oroinc/platform · GHSA-3vhm-q4w3-rw8q

medium2024-05-20

OroCRM Forced Redirect to External Website

oroinc/crm · GHSA-v8hp-239v-9367

high2024-05-18

CVE-2024-4264-litellm passes untrusted data to `eval` function without sanitization

berriai/litellm · GHSA-7ggm-4rjg-594w

low2024-05-17

random_compat Uses insecure CSPRNG

paragonie/random_compat · GHSA-3fmq-x9q6-wm39

medium2024-05-17

CVE-2016-1000253-onelogin/php-saml signature wrapping attacks

saml-toolkits/php-saml · GHSA-g48f-pgwh-wwxx