Security advisories

medium2024-04-21

CVE-2024-29217-Apache Answer: XSS vulnerability when changing personal website

apache/incubator-answer · GHSA-cvqr-mwh6-2vc6

low2024-04-21

CVE-2024-29733-Improper Certificate Validation vulnerability in Apache Airflow FTP Provider

apache/airflow · GHSA-3gg8-mc87-cq3h

medium2024-04-19

CVE-2024-1681-flask-cors vulnerable to log injection when the log level is set to debug

corydolphin/flask-cors · GHSA-84pr-m4jr-85g5

high2024-04-19

CVE-2024-32652-@hono/node-server has Denial of Service risk when receiving Host header that cannot be parsed

honojs/node-server · GHSA-hgxw-5xg3-69jx

high2024-04-19

CVE-2024-32650-Denial of Service Vulnerability in Rustls Library

rustls/rustls · GHSA-6g7w-8wpp-frhj

medium2024-04-19

CVE-2024-22640-TCPDF vulnerable to Regular Expression Denial of Service

tecnickcom/tcpdf · GHSA-mx3p-fhpw-x6rv

low2024-04-19

Enabling Authentication does not close all logged in socket connections immediately

louislam/uptime-kuma · GHSA-23q2-5gf8-gjpp

medium2024-04-18

CVE-2024-32473-IPv6 enabled on IPv4-only network interfaces

moby/moby · GHSA-x84c-p2g9-rqv9

high2024-04-18

CVE-2024-32474-Sentry vulnerable to leaking superuser cleartext password in logs

getsentry/sentry · GHSA-6cjm-4pxw-7xp9

low2024-04-18

CVE-2024-30257-1Panel's password verification is suspected to have a timing attack vulnerability

1panel-dev/1panel · GHSA-6m9h-2pr2-9j8f

high2024-04-18

CVE-2024-23817-Dolibarr Application Home Page has HTML injection vulnerability

dolibarr/dolibarr · GHSA-7947-48q7-cp5m

critical2024-04-18

CVE-2024-30564-@andrei-tatar/nora-firebase-common Prototype Pollution vulnerability

andrei-tatar/nora-firebase-common · GHSA-jjff-q3q4-5hh8

medium2024-04-18

CVE-2024-27306-aiohttp Cross-site Scripting vulnerability on index pages for static file handling

aio-libs/aiohttp · GHSA-7gpw-8wmc-pm8g

medium2024-04-18

CVE-2024-31869-Apache Airflow: Sensitive configuration for providers displayed when "non-sensitive-only" config used

apache/airflow · GHSA-2522-mrjc-m688

low2024-04-17

Prototype pollution in emit function

derbyjs/derby · GHSA-82jv-9wjw-pqh6

medium2024-04-17

CVE-2024-32472-Stored Cross-site Scripting (XSS) in excalidraw's web embed component

excalidraw/excalidraw · GHSA-m64q-4jqh-f72f

critical2024-04-17

CVE-2024-3817-HashiCorp go-getter Vulnerable to Argument Injection When Fetching Remote Default Git Branches

hashicorp/go-getter · GHSA-q64h-39hv-4cf7

high2024-04-17

CVE-2024-31583-Pytorch use-after-free vulnerability

pytorch/pytorch · GHSA-pg7h-5qx3-wjr3

high2024-04-17

CVE-2024-31580-PyTorch heap buffer overflow vulnerability

pytorch/pytorch · GHSA-5pcm-hx3q-hm94

low2024-04-17

CVE-2023-0657-Keycloak vulnerable to impersonation via logout token exchange

keycloak/keycloak · GHSA-7fpj-9hr8-28vh