Security advisories

critical2024-05-06

CVE-2024-34252-pywasm3 contains a global buffer overflow which leads to segmentation fault

wasm3/pywasm3 · GHSA-hh39-vjv8-j337

high2024-05-06

CVE-2024-34078-Arbitrary HTML present after sanitization because of unicode normalization

matthiask/html-sanitizer · GHSA-wvhx-q427-fgh3

high2024-05-06

CVE-2024-34069-Werkzeug debugger vulnerable to remote execution when interacting with attacker controlled domain

pallets/werkzeug · GHSA-2g68-c3qc-8985

medium2024-05-06

CVE-2024-34064-Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter

pallets/jinja · GHSA-h75v-3vvj-5mfj

high2024-05-06

CVE-2024-32982-Litestar and Starlite vulnerable to Path Traversal

litestar-org/litestar · GHSA-83pv-qr33-2vcf

high2024-05-06

CVE-2024-32972-go-ethereum vulnerable to DoS via malicious p2p message

ethereum/go-ethereum · GHSA-4xc9-8hmq-j652

medium2024-05-06

CVE-2024-34529-Nebari prints temporary Keycloak root password

nebari-dev/nebari · GHSA-vjc4-3vgx-pq9h

medium2024-05-06

CVE-2024-34528-WordOps has TOCTOU race condition

wordops/wordops · GHSA-23qq-p4gq-gc2g

high2024-05-05

CVE-2024-34510-Gradio allows credential leakage on Windows

gradio-app/gradio · GHSA-rvfh-h6c7-fc3c

high2024-05-05

CVE-2024-34515-image-optimizer allows PHAR deserialization

spatie/image-optimizer · GHSA-6pjm-hmvf-h4rr

medium2024-05-05

CVE-2024-34511-Gradio's Component Server does not properly consider` _is_server_fn` for functions

gradio-app/gradio · GHSA-34rf-p3r3-58x2

medium2024-05-05

CVE-2024-34487-Ryu Infinite Loop vulnerability

faucetsdn/ryu · GHSA-m9vm-8mv9-v5v3

high2024-05-05

CVE-2024-34486-Ryu Infinite Loop vulnerability

faucetsdn/ryu · GHSA-fgpw-cx3v-wj95

high2024-05-05

CVE-2024-34488-Ryu Infinite Loop vulnerability

faucetsdn/ryu · GHSA-ffp9-pfq9-g2ww

medium2024-05-05

CVE-2024-34484-Ryu Infinite Loop vulnerability

faucetsdn/ryu · GHSA-c7w6-33j3-j3mx

high2024-05-05

CVE-2024-34483-Ryu Infinite Loop vulnerability

faucetsdn/ryu · GHSA-7hmm-wg23-2w7m

high2024-05-05

CVE-2024-34489-Ryu Infinite Loop vulnerability

faucetsdn/ryu · GHSA-59p2-v62x-gxj8

medium2024-05-05

CVE-2024-34478-btcd susceptible to consensus failures

btcsuite/btcd · GHSA-3jgf-r68h-xfqm

medium2024-05-04

CVE-2024-34467-ThinkPHP Cross-Site Scripting Vulnerability

top-think/framework · GHSA-969f-v7jv-pgj3

critical2024-05-04

CVE-2024-34461-Zenario uses Twig filters insecurely in the Twig Snippet plugin

tribalsystems/zenario · GHSA-hr2r-w6wc-25pv