Security advisories

medium2024-05-04

CVE-2024-34460-Zenario's Tree Explorer tool from Organizer affected by Cross-site Scripting

tribalsystems/zenario · GHSA-7qwj-gcjf-828f

medium2024-05-03

CVE-2024-34075-kurwov vulnerable to Denial of Service due to improper data sanitization

xiboon/kurwov · GHSA-hfrv-h3q8-9jpr

medium2024-05-03

CVE-2024-34068-Pterodactyl Wings vulnerable to Server-Side Request Forgery during remote file pull

pterodactyl/wings · GHSA-qq22-jj8x-4wwv

medium2024-05-03

CVE-2024-34067-Pterodactyl panel's admin area vulnerable to Cross-site Scripting

pterodactyl/panel · GHSA-384w-wffr-x63q

high2024-05-03

CVE-2024-34066-Pterodactyl Wings vulnerable to Arbitrary File Write/Read

pterodactyl/wings · GHSA-gqmf-jqgv-v8fw

high2024-05-03

CVE-2024-34073-sagemaker-python-sdk Command Injection vulnerability

aws/sagemaker-python-sdk · GHSA-7pc3-pr3q-58vg

high2024-05-03

CVE-2024-34072-sagemaker-python-sdk vulnerable to Deserialization of Untrusted Data

aws/sagemaker-python-sdk · GHSA-wjvx-jhpj-r54r

low2024-05-03

CVE-2024-34063-vodozemac has degraded secret zeroization capabilities

matrix-org/vodozemac · GHSA-c3hm-hxwf-g5c6

low2024-05-03

CVE-2024-34062-tqdm CLI arguments injection attack

tqdm/tqdm · GHSA-g7vv-2v7x-gj9p

medium2024-05-03

CVE-2024-34449-Vditor allows Cross-site Scripting via an attribute of an `A` element

vanessa219/vditor · GHSA-m5jf-8crm-r65m

medium2024-05-03

CVE-2024-34447-Bouncy Castle Java Cryptography API vulnerable to DNS poisoning

bcgit/bc-java · GHSA-4h8f-2wvx-gg5w

low2024-05-03

CVE-2024-31636-LIEF obtain sensitive information via the name parameter

lief-project/lief · GHSA-377p-g8gr-5wpg

high2024-05-03

CVE-2024-33398-piraeus-operator allows attacker to impersonate service account

piraeusdatastore/piraeus-operator · GHSA-6fg2-hvj9-832f

medium2024-05-03

CVE-2024-34061-changedetection.io Cross-site Scripting vulnerability

dgtlmoon/changedetection.io · GHSA-pwgc-w4x9-gw67

critical2024-05-03

Some CORS middleware allow untrusted origins

jub0bs/fcors · GHSA-v84h-653v-4pq9

critical2024-05-03

Some CORS middleware allow untrusted origins

jub0bs/cors · GHSA-vhxv-fg4m-p2w8

high2024-05-03

CVE-2024-30251-aiohttp vulnerable to Denial of Service when trying to parse malformed POST requests

aio-libs/aiohttp · GHSA-5m98-qgg9-wh84

medium2024-05-03

CVE-2023-35701-Apache Hive Code Injection vulnerability

apache/hive · GHSA-vpw3-3prf-3974

high2024-05-02

CVE-2024-33396-karmada vulnerable to arbitrary code execution via a crafted command

karmada-io/karmada · GHSA-wccg-v638-j9q2

critical2024-05-02

CVE-2024-34393-libxmljs2 type confusion vulnerability when parsing specially crafted XML

marudor/libxmljs2 · GHSA-mjr4-7xg5-pfvh