Security advisories

low2024-04-26

CVE-2024-4198-Mattermost fails to fully validate role changes

mattermost/mattermost · GHSA-5qx9-9ffj-5r8f

medium2024-04-26

CVE-2024-33669-Passbolt Browser Extension leaks password information

passbolt/passbolt_browser_extension · GHSA-xfq4-78j7-v594

medium2024-04-26

CVE-2024-33664-python-jose denial of service via compressed JWE content

mpdavis/python-jose · GHSA-cjwg-qfpm-7377

critical2024-04-26

CVE-2024-33663-python-jose algorithm confusion with OpenSSH ECDSA keys

mpdavis/python-jose · GHSA-6c5p-j8vq-pqhj

medium2024-04-25

CVE-2024-32481-vyper's range(start, start + N) reverts for negative numbers

vyperlang/vyper · GHSA-ppx5-q359-pvwj

medium2024-04-25

CVE-2024-32645-vyper performs incorrect topic logging in raw_log

vyperlang/vyper · GHSA-xchq-w5r3-4wg3

medium2024-04-25

CVE-2024-32646-vyper performs double eval of the slice start/length args in certain cases

vyperlang/vyper · GHSA-r56x-j438-vw5m

medium2024-04-25

CVE-2024-32647-vyper performs double eval of raw_args in create_from_blueprint

vyperlang/vyper · GHSA-3whq-64q2-qfj6

medium2024-04-25

CVE-2024-32648-vyper default functions don't respect nonreentrancy keys

vyperlang/vyper · GHSA-m2v9-w374-5hj9

medium2024-04-25

CVE-2024-32649-vyper performs multiple eval of `sqrt()` argument built in

vyperlang/vyper · GHSA-5jrj-52x8-m64h

critical2024-04-25

PHPECC vulnerable to multiple cryptographic side-channel attacks

phpecc/phpecc · GHSA-346h-749j-r28w

high2024-04-25

CVE-2024-32868-ZITADEL's Improper Lockout Mechanism Leads to MFA Bypass

zitadel/zitadel · GHSA-7j7j-66cv-m239

medium2024-04-25

CVE-2024-1726-Quarkus: security checks in resteasy reactive may trigger a denial of service

quarkusio/quarkus · GHSA-mv64-86g8-cqq7

medium2024-04-25

CVE-2024-0874- CoreDNS may return invalid cache entries

coredns/coredns · GHSA-m9w6-wp3h-vq8g

medium2024-04-25

CVE-2024-1102-Jberet: jberet-core logging database credentials

jberet/jsr352 · GHSA-9wmf-xf3h-r8pr

medium2024-04-25

CVE-2023-5675-Quarkus: authorization flaw in quarkus resteasy reactive and classic

quarkusio/quarkus · GHSA-25w4-hfqg-4r52

medium2024-04-24

CVE-2020-14370-Information disclosure in podman

containers/podman · GHSA-c3wv-qmjj-45r6

high2024-04-24

CVE-2017-15103-Heketi Arbitrary Code Execution

heketi/heketi · GHSA-6g56-v9qg-jp92

critical2024-04-24

CVE-2024-32880-pyLoad allows upload to arbitrary folder lead to RCE

pyload/pyload · GHSA-3f7w-p8vr-4v5f

high2024-04-24

CVE-2021-25318-Rancher does not properly specify ApiGroup when creating Kubernetes RBAC resources

rancher/rancher · GHSA-f9xf-jq4j-vqw4