Security advisories

medium2024-05-14

Scrapy allows redirect following in protocols other than HTTP

scrapy/scrapy · GHSA-23j4-mw76-5v7h

medium2024-05-14

Scrapy's redirects ignoring scheme-specific proxy settings

scrapy/scrapy · GHSA-jm3v-qxmh-hxwv

medium2024-05-14

CVE-2024-1968-Scrapy leaks the authorization header on same-domain but cross-origin redirects

scrapy/scrapy · GHSA-4qqq-9vqf-3h3f

medium2024-05-14

CVE-2024-34712-Oceanic allows unsanitized user input to lead to path traversal in URLs

oceanicjs/oceanic · GHSA-5h5v-hw44-f6gg

high2024-05-14

CVE-2024-32977-OctoPrint has an Authentication Bypass via X-Forwarded-For Header when autologinLocal is enabled

octoprint/octoprint · GHSA-2vjq-hg5w-5gm7

medium2024-05-14

CVE-2024-34358-TYPO3 vulnerable to an Uncontrolled Resource Consumption in the ShowImageController

typo3/typo3 · GHSA-36g8-62qv-5957

medium2024-05-14

CVE-2024-34357-TYPO3 vulnerable to Cross-Site Scripting in the ShowImageController

typo3/typo3 · GHSA-hw6c-6gwq-3m3m

medium2024-05-14

CVE-2024-34356-TYPO3 vulnerable to Cross-Site Scripting in the Form Manager Module

typo3/typo3 · GHSA-v6mw-h7w6-59w3

low2024-05-14

CVE-2024-34355-TYPO3 vulnerable to an HTML Injection in the History Module

typo3/typo3 · GHSA-xjwx-78x7-q6jc

medium2024-05-14

CVE-2024-30054-Microsoft Power BI Client JavaScript SDK Information Disclosure Vulnerability

microsoft/powerbi-javascript · GHSA-wchx-rm6h-7jf6

medium2024-05-14

CVE-2024-34914-PHP Censor uses a weak hashing algorithm for the remember me key

php-censor/php-censor · GHSA-fqw7-839j-hvxj

medium2024-05-14

CVE-2024-34243-Konga is vulnerable to Cross Site Scripting (XSS) attacks

pantsel/konga · GHSA-93pf-mrc8-4g3h

medium2024-05-14

CVE-2024-32077-Apache Airflow: XSS vulnerability in Task Instance Log/Log Details

apache/airflow · GHSA-52gm-qmg3-r4qp

critical2024-05-14

CVE-2024-4825-Cockpit CMS contains an arbitrary file upload vulenrability

cockpit-hq/cockpit · GHSA-vpj8-xfqc-jcv9

high2024-05-14

CVE-2024-4068-Uncontrolled resource consumption in braces

micromatch/braces · GHSA-grv7-fg5c-xmjg

medium2024-05-14

CVE-2024-4067-Regular Expression Denial of Service (ReDoS) in micromatch

micromatch/micromatch · GHSA-952p-6rrq-rcjv

low2024-05-14

CVE-2024-3462-Ant Media Server does not properly authorize non-administrative API calls

ant-media/ant-media-server · GHSA-g95v-3pj6-j433

high2024-05-14

CVE-2024-3727-github.com/containers/image allows unexpected authenticated registry accesses

containers/image · GHSA-6wvf-f2vw-3425

critical2024-05-14

CVE-2024-34365-Apache Karaf Cave: Cave SSRF and arbitrary file access

apache/karaf-cave · GHSA-338x-hfx8-vx9x

medium2024-05-13

CVE-2024-34709-Directus Lacks Session Tokens Invalidation

directus/directus · GHSA-g65h-35f3-x2w3