Security advisories

critical2024-04-23

CVE-2024-28253-OpenMetadata vulnerable to SpEL Injection in `PUT /api/v1/policies` (`GHSL-2023-252`)

open-metadata/openmetadata · GHSA-7vf4-x5m2-r6gr

medium2024-04-23

cg vulnerable to an Open Redirect Vulnerability on Referer Header

clinical-genomics/cg · GHSA-w228-rfpx-fhm4

medium2024-04-23

Renovate vulnerable to arbitrary command injection via helmv3 manager and registryAliases

renovatebot/renovate · GHSA-rqgv-292v-5qgr

medium2024-04-23

CVE-2024-32869-Hono vulnerable to Restricted Directory Traversal in serveStatic with deno

honojs/hono · GHSA-3mpf-rcc7-5347

critical2024-04-23

CVE-2024-21511-MySQL2 for Node Arbitrary Code Injection

sidorares/node-mysql2 · GHSA-4rch-2fh8-94vw

low2024-04-23

CVE-2024-3177-Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin

kubernetes/kubernetes · GHSA-pxhw-596r-rwq5

high2024-04-22

dbt uses a SQLparse version with a high vulnerability

dbt-labs/dbt-core · GHSA-p72q-h37j-3hq7

high2024-04-22

CVE-2020-14144-Arbitrary Code Execution in Gitea

go-gitea/gitea · GHSA-3h6c-c475-jm7v

medium2024-04-22

CVE-2022-24769-Moby (Docker Engine) started with non-empty inheritable Linux process capabilities

moby/moby · GHSA-2mm7-x5h6-5pvq

high2024-04-22

CVE-2024-34347-@hoppscotch/cli affected by Sandbox Escape in @hoppscotch/js-sandbox leads to RCE

hoppscotch/hoppscotch · GHSA-qmmm-73r2-f8xr

high2024-04-22

CVE-2024-32480-LibreNMS vulnerable to a Time-Based Blind SQL injection leads to database extraction

librenms/librenms · GHSA-jh57-j3vq-h438

high2024-04-22

CVE-2024-32479-LibreNMS uses Improper Sanitization on Service template name leads to Stored XSS

librenms/librenms · GHSA-72m9-7c8x-pmmw

high2024-04-22

CVE-2024-32461-LibreNMS vulnerable to SQL injection time-based leads to database extraction

librenms/librenms · GHSA-cwx6-cx7x-4q34

low2024-04-22

JADX file override vulnerability

skylot/jadx · GHSA-hvp5-5x4f-33fq

low2024-04-22

Authelia's Group Changes may not have the expected results (YAML file backend)

authelia/authelia · GHSA-x883-2vmg-xwf7

high2024-04-22

CVE-2024-32656-Ant Media Server vulnerable to a local privilege escalation

ant-media/ant-media-server · GHSA-qwhw-hh9j-54f5

medium2024-04-22

CVE-2024-27347-Apache HugeGraph-Hubble: SSRF in Hubble connection page

apache/incubator-hugegraph-toolchain · GHSA-77x4-55q7-4vmj

high2024-04-22

CVE-2024-27349-Apache HugeGraph-Server: Bypass whitelist in Auth mode

apache/incubator-hugegraph · GHSA-6mgp-p75r-vhjm

critical2024-04-22

CVE-2024-27348-Apache HugeGraph-Server: Command execution in gremlin

apache/incubator-hugegraph · GHSA-29rc-vq7f-x335

high2024-04-22

CVE-2024-28717-OpenStack Storlets arbitrary code execution vulnerability

openstack/storlets · GHSA-rfm2-f94j-qhjp