Security advisories

critical2024-04-15

CVE-2024-28056-AWS Amplify CLI has incorrect trust policy management

aws-amplify/amplify-cli · GHSA-846g-p7hm-f54r

medium2024-04-15

Traefik affected by HTTP/2 CONTINUATION flood in net/http

traefik/traefik · GHSA-7f4j-64p6-5h5v

high2024-04-15

Constallation has pods exposed to peers in VPC

edgelesssys/constellation · GHSA-g8fc-vrcg-8vjg

medium2024-04-15

CVE-2024-32489-TCPDF Cross-site Scripting vulnerability

tecnickcom/tcpdf · GHSA-g9wg-98c2-qv3v

medium2024-04-15

CVE-2024-3772-Pydantic regular expression denial of service

pydantic/pydantic · GHSA-mr82-8j83-vxmv

medium2024-04-12

CVE-2024-32028-Sensitive query parameters logged by default in OpenTelemetry.Instrumentation http and AspNetCore

open-telemetry/opentelemetry-dotnet · GHSA-vh2m-22xx-q94f

high2024-04-12

CVE-2024-32003-Dusk plugin may allow unfettered user authentication in misconfigured installs

wintercms/wn-dusk-plugin · GHSA-chcp-g9j5-3xxx

medium2024-04-12

CVE-2022-25777-Mautic: MST-48 Server-Side Request Forgery in Asset section

mautic/mautic · GHSA-mgv8-w49f-822w

high2024-04-12

CVE-2024-32005-NiceGUI allows potential access to local file system

zauberzeug/nicegui · GHSA-mwc7-64wg-pgvj

high2024-04-12

CVE-2022-25776-Mautic Sensitive Data Exposure due to inadequate user permission settings

mautic/mautic · GHSA-qjx3-2g35-6hv8

medium2024-04-12

CVE-2022-25775-Mautic SQL Injection in dynamic Reports

mautic/mautic · GHSA-jj6w-2cqg-7p94

high2024-04-12

CVE-2021-27916-Mautic vulnerable to Relative Path Traversal / Arbitrary File Deletion due to GrapesJS builder

mautic/mautic · GHSA-9fcx-cv56-w58p

high2024-04-12

CVE-2024-28869-Traefik vulnerable to denial of service with Content-length header

traefik/traefik · GHSA-4vwx-54mw-vqfw

medium2024-04-12

CVE-2024-31391-Apache Solr Operator liveness and readiness probes may leak basic auth credentials

apache/solr-operator · GHSA-g9qx-25vj-rf53

medium2024-04-12

CVE-2024-31839-tiagorlampert CHAOS vulnerable to Cross Site Scripting

tiagorlampert/chaos · GHSA-c5rv-hjjc-jv7m

medium2024-04-12

CVE-2024-28718-OpenStack magnum vulnerable to time-of-check to time-of-use (TOCTOU) attack

openstack/magnum · GHSA-jx7x-9r98-h5xr

high2024-04-12

CVE-2024-29800-timber/timber vulnerable to Deserialization of Untrusted Data

timber/timber · GHSA-6363-v5m4-fvq3

medium2024-04-12

CVE-2022-25774-Mautic vulnerable to cross-site scripting in notifications via saving Dashboards

mautic/mautic · GHSA-fhcx-f7jg-jx3f

high2024-04-12

CVE-2024-27309-Apache Kafka: Potential incorrect access control during migration from ZK mode to KRaft mode

apache/kafka · GHSA-79vv-vp32-gpp7

high2024-04-12

CVE-2024-30850-tiagorlampert CHAOS vulnerable to command injections

tiagorlampert/chaos · GHSA-p3j6-f45h-hw5f