Security advisories

low2024-05-17

onelogin/php-saml Improper signature validation on LogoutRequest/LogoutResponse.

saml-toolkits/php-saml · GHSA-9wrw-p9rm-r782

high2024-05-17

nzo/url-encryptor-bundle Insecure default secret key and IV allowing anyone to decrypt values

nayzo/nzourlencryptorbundle · GHSA-r2r8-36pq-27cm

critical2024-05-17

Flow Swift Mailer package Remote code execution

neos/swiftmailer · GHSA-rq6q-hjvh-5mwh

high2024-05-17

Cross-site Scripting vulnerabilities in Neos

neos/neos · GHSA-6cj3-rc4p-f38f

medium2024-05-17

Privilege Escalation in TYPO3 Neos

neos/neos · GHSA-43cf-7f3h-38rg

medium2024-05-17

Time-Based Information Disclosure Vulnerability in Flow

neos/flow · GHSA-6pq8-67pw-j6hw

high2024-05-17

Neos Information Disclosure Security Note

neos/neos · GHSA-3c5g-73f7-grvm

medium2024-05-17

Neos Flow Information disclosure in entity security

neos/flow · GHSA-9cw3-j7wg-jwj8

medium2024-05-17

Neos Flow Arbitrary file upload and XML External Entity processing

neos/flow · GHSA-5vv7-j593-mgjc

low2024-05-17

Insecure deserialize Vulnerability in FLOW3

neos/flow · GHSA-7h74-7vcw-4mwp

critical2024-05-17

namshi/jose - Verification bypass

namshi/jose · GHSA-4rr6-gf59-ggw5

high2024-05-17

namshi/jose insecure JSON Web Signatures (JWS)

namshi/jose · GHSA-hxhc-wmg8-xrqf

medium2024-05-17

CVE-2024-5042-Submariner Operator sets unnecessary RBAC permissions

submariner-io/submariner-operator · GHSA-2rhx-qhxp-5jpw

critical2024-05-16

CVE-2024-5023-ConsoleMe has an Arbitrary File Read Vulnerability via Limited Git command

netflix/consoleme · GHSA-3783-62vc-jr7x

high2024-05-16

CVE-2024-34273-njwt Prototype Pollution vulnerability

jwtk/njwt · GHSA-3hvj-2783-34x2

medium2024-05-16

CVE-2024-35185-Denial of service of Minder Server with attacker-controlled REST endpoint

stacklok/minder · GHSA-fjw8-3gp8-4cvx

medium2024-05-16

CVE-2024-35176-REXML contains a denial of service vulnerability

ruby/rexml · GHSA-vg3r-rm7w-2xgh

high2024-05-16

CVE-2024-3848-MLflow has a Local File Read/Path Traversal bypass

mlflow/mlflow · GHSA-rfqq-wq6w-72jm

high2024-05-16

CVE-2024-4078-LoLLMS Command Injection vulnerability

parisneo/lollms · GHSA-pwc9-q4hj-pg8g

high2024-05-16

CVE-2024-4181-RunGptLLM class in LlamaIndex has a command injection

run-llama/llama_index · GHSA-pw38-xv9x-h8ch