Security advisories

medium2024-05-15

Laravel Risk of mass-assignment vulnerabilities

laravel/framework · GHSA-rj3w-99gc-8j58

medium2024-05-15

Read private customer data reclaiming carts in Klaviyo Magento

klaviyo/magento2-klaviyo · GHSA-hvgw-gg3p-295j

low2024-05-15

Laravel Encrypter Failure to decryption vulnerability

illuminate/encryption · GHSA-6wjw-qf87-fv5v

high2024-05-15

Laravel Cookie serialization vulnerability

illuminate/cookie · GHSA-2867-6rrm-38gr

medium2024-05-15

Laravel Cross-site Scripting vulnerability in blade templating

illuminate/view · GHSA-297g-xg4h-7w4c

medium2024-05-15

Laravel Risk of mass-assignment vulnerabilities

illuminate/database · GHSA-cc2w-ghc5-m5qr

critical2024-05-15

Laravel RCE vulnerability in "cookie" session driver

illuminate/cookie · GHSA-2ffv-r4r9-r8xr

medium2024-05-15

Laravel Hijacked authentication cookies vulnerability

illuminate/auth · GHSA-q4xf-7fw5-4x8v

high2024-05-15

gregwar/rst Local File Inclusion Vulnerability

gregwar/rst · GHSA-2gq2-m628-33xp

critical2024-05-15

gree/jose - "None" Algorithm treated as valid in tokens

nov/jose-php · GHSA-9gxv-x7rp-r2hc

medium2024-05-15

fuel/core Crypt encryption compromised.

fuel/core · GHSA-fgrx-4637-fcf5

high2024-05-15

fuel/core ImageMagick driver does not escape all shell arguments.

fuel/core · GHSA-26hp-cgjj-m2j3

medium2024-05-15

FOSUserBundle User Identity Validation Vulnerability

friendsofsymfony/fosuserbundle · GHSA-8wx3-8m4x-g5h4

high2024-05-15

FOSUserBundle Session Hijacking Vulnerability

friendsofsymfony/fosuserbundle · GHSA-6mjq-9x4w-m3w9

medium2024-05-15

FOSUserBundle Entropy is lost in the TokenGenerator

friendsofsymfony/fosuserbundle · GHSA-pjx8-984p-7p3x

medium2024-05-15

FOSRestBundle issue with broken validation of JSONP callbacks

friendsofsymfony/fosrestbundle · GHSA-p9fg-j6ww-953m

medium2024-05-15

friendsofsymfony/oauth2-php open redirection in oauth

friendsofsymfony/oauth2-php · GHSA-xm3x-4ph3-3x9c

critical2024-05-15

firebase/php-jwt: "None" Algorithm treated as valid on tokens

firebase/php-jwt · GHSA-h533-5v22-8vcp

high2024-05-15

eZ Platform User data disclosure

ezsystems/repository-forms · GHSA-3g43-xfrw-pv5m

medium2024-05-15

eZ Platform Admin UI is vulnerable to Cross-site Scripting (XSS)

ezsystems/platformuiassetsbundle · GHSA-w9p3-26fx-5mp3