Security advisories

high2024-04-24

CVE-2021-31999-Rancher Privilege escalation vulnerability via malicious "Connection" header

rancher/rancher · GHSA-pvxj-25m6-7vqr

high2024-04-24

CVE-2021-36776-Rancher's Steve API Component Improper authorization check allows privilege escalation

rancher/rancher · GHSA-gvh9-xgrq-r8hw

high2024-04-24

CVE-2021-36775-Rancher's Failure to delete orphaned role bindings does not revoke project level access from group based authentication

rancher/rancher · GHSA-28g7-896h-695v

critical2024-04-24

CVE-2020-28991-Improper Access Control in Gitea

go-gitea/gitea · GHSA-r7h7-chh4-5rvm

high2024-04-24

CVE-2021-3382-Buffer Overflow in gitea

go-gitea/gitea · GHSA-9f8c-pfvv-p4gm

critical2024-04-24

CVE-2020-14316-Privilege Escalation in kubevirt

kubevirt/kubevirt · GHSA-828r-r2c8-rfw3

medium2024-04-24

CVE-2019-11245-Kubelet Incorrect Privilege Assignment

kubernetes/kubernetes · GHSA-r76g-g87f-vw8f

medium2024-04-24

CVE-2020-8563-Sensitive Information leak via Log File in Kubernetes

kubernetes/kubernetes · GHSA-5xfg-wv98-264m

medium2024-04-24

CVE-2020-8566-Sensitive Information leak via Log File in Kubernetes

kubernetes/kubernetes · GHSA-5x96-j797-5qqw

medium2024-04-24

CVE-2020-8557-Denial of service in Kubernetes

kubernetes/kubernetes · GHSA-55qj-gj3x-jq9r

medium2024-04-24

CVE-2020-8559-Privilege Escalation in Kubernetes

kubernetes/kubernetes · GHSA-33c5-9fx5-fvjm

medium2024-04-24

CVE-2024-32879-social-auth-app-django affected by Improper Handling of Case Sensitivity

python-social-auth/social-app-django · GHSA-2gr8-3wc7-xhj3

low2024-04-24

CVE-2024-58263-CosmWasm affected by arithmetic overflows

cosmwasm/cosmwasm · GHSA-8724-5xmm-w5xq

high2024-04-24

CVE-2024-28848-OpenMetadata vulnerable to a SpEL Injection in `GET /api/v1/policies/validation/condition/<expr>` (`GHSL-2023-236`)

open-metadata/openmetadata · GHSA-5xv3-fm7g-865r

high2024-04-24

CVE-2024-28847-OpenMetadata vulnerable to a SpEL Injection in `PUT /api/v1/events/subscriptions` (`GHSL-2023-251`)

open-metadata/openmetadata · GHSA-8p5r-6mvv-2435

medium2024-04-24

Pimcore TinyMCE Bundle - tinymce CVE-2024-29203, CVE-2024-29881

pimcore/pimcore · GHSA-vjwg-28gv-pm8h

critical2024-04-23

CVE-2018-7602-Drupal Core Remote Code Execution Vulnerability

drupal/core · GHSA-297x-j9pm-xjgg

medium2024-04-23

CVE-2024-32875-Hugo Markdown titles do not escaped in internal render hooks

gohugoio/hugo · GHSA-ppf8-hhpp-f5hj

high2024-04-23

CVE-2024-32866-Conform contains a Prototype Pollution Vulnerability in `parseWith...` function

edmundhung/conform · GHSA-624g-8qjg-8qxf

medium2024-04-23

CVE-2024-31208-Synapse V2 state resolution weakness allows Denial of Service (DoS)

element-hq/synapse · GHSA-3h7q-rfh9-xm4v