Security advisories

medium2024-05-15

Drupal core Open Redirect vulnerability

drupal/core · GHSA-6gf6-24h2-66j4

medium2024-05-15

Drupal core uses a vulnerable Third-party library CKEditor

drupal/core · GHSA-v273-j5hq-26xp

high2024-05-15

Drupal core Multiple vulnerabilities due to the use of the third-party library Archive_Tar

drupal/core · GHSA-98h9-727m-44qv

medium2024-05-15

Drupal core Access bypass

drupal/core · GHSA-mh4h-27gq-cxwj

medium2024-05-15

Drupal core unrestricted file upload

drupal/core · GHSA-7gwj-7fhm-vw4w

medium2024-05-15

Drupal core Denial of Service

drupal/core · GHSA-pr99-c33p-fwf6

critical2024-05-15

Drupal Core Insufficient Contextual Links validation leads to Remote Code Execution

drupal/core · GHSA-7v68-3pr5-h3cr

critical2024-05-15

Drupal core Remote Code Execution

drupal/core · GHSA-6mgp-v5cm-ghg5

medium2024-05-15

Drupal Anonymous Open Redirect

drupal/core · GHSA-gfvf-2f25-f34r

medium2024-05-15

Drupal External URL injection through URL aliases leading to Open Redirect

drupal/core · GHSA-7f4f-p7mq-p4fv

medium2024-05-15

Drupal Content moderation Access bypass

drupal/core · GHSA-f84q-mgj9-8jfc

high2024-05-15

doctrine/orm Regression in Query Parenthesis can have Security Implications

doctrine/orm · GHSA-vjrg-wpm8-rhrw

critical2024-05-15

Doctrine SQL injection vulnerability

doctrine/orm · GHSA-6q9v-4hq6-5m67

medium2024-05-15

CVE-2024-35183-wolfictl leaks GitHub tokens to remote non-GitHub git servers

wolfi-dev/wolfictl · GHSA-8fg7-hp93-qhvr

medium2024-05-15

doctrine/doctrine-module zero-valued authentication credentials vulnerability

doctrine/doctrinemodule · GHSA-9wv8-3h8h-x2wc

high2024-05-15

Doctrine DBAL SQL injection possibility

doctrine/dbal · GHSA-76w8-mqx4-wjrf

low2024-05-15

datadog/dd-trace Circumvents open_basedir INI directive

datadog/dd-trace-php · GHSA-qvgg-r6rq-vwfx

medium2024-05-15

CVE-2024-28087-Bonitasoft Runtime Community edition's contains an insecure direct object references vulnerability

bonitasoft/bonita-engine · GHSA-76v2-48w6-crxr

critical2024-05-15

codeigniter/framework SQL injection in ODBC database driver

simplysites/codeigniter · GHSA-27qr-636m-wxg2

medium2024-05-15

Inadequate XSS Prevention in CodeIgniter/Framework Security Library

bcit-ci/codeigniter · GHSA-q9j3-4ghj-6h57