Security advisories

medium2024-04-10

CVE-2024-21509-mysql2 vulnerable to Prototype Poisoning

sidorares/node-mysql2 · GHSA-49j4-86m8-q2jw

high2024-04-10

CVE-2023-6236-WildFly Elytron: OIDC app attempting to access the second tenant, the user should be prompted to log

wildfly-security/wildfly-elytron · GHSA-jpmx-996v-48fm

medium2024-04-09

CVE-2024-28234-Contao: Insufficient BBCode sanitizer

contao/contao · GHSA-j55w-hjpj-825g

low2024-04-09

CVE-2024-28191-Contao: Unencoded insert tags in the frontend

contao/contao · GHSA-747v-52c4-8vj8

medium2024-04-09

CVE-2024-28190-Contao: Cross site scripting in the file manager

contao/contao · GHSA-v24p-7p4j-qvvf

medium2024-04-09

CVE-2024-29992-Azure Identity Library for .NET Information Disclosure Vulnerability

azure/azure-sdk-for-net · GHSA-wvxc-855f-jvrv

medium2024-04-09

CVE-2024-31867-Apache Zeppelin: LDAP search filter query Injection Vulnerability

apache/zeppelin · GHSA-qmr3-52xf-wmhx

medium2024-04-09

CVE-2024-31868-Apache Zeppelin vulnerable to cross-site scripting in the helium module

apache/zeppelin · GHSA-rrvf-5w4r-3x7v

medium2024-04-09

CVE-2024-31865-Apache Zeppelin: Cron arbitrary user impersonation with improper privileges

apache/zeppelin · GHSA-g44m-x5h7-fr5q

critical2024-04-09

CVE-2024-31866-Improper escaping in Apache Zeppelin

apache/zeppelin · GHSA-86jx-wr74-xr74

critical2024-04-09

CVE-2024-31864-Apache Zeppelin remote code execution by adding malicious JDBC connection string

apache/zeppelin · GHSA-66j8-c83m-gj5f

high2024-04-09

CVE-2024-31457-gin-vue-admin background arbitrary code coverage vulnerability

flipped-aurora/gin-vue-admin · GHSA-gv3w-m57p-3wc4

medium2024-04-09

CVE-2024-31455-Minder GetRepositoryByName data leak

stacklok/minder · GHSA-ggp5-28x4-xcj9

medium2024-04-09

CVE-2024-30262-Contao: Remember-me tokens will not be cleared after a password change

contao/contao · GHSA-r4r6-j2j3-7pp5

high2024-04-09

CVE-2024-29905-DIRAC: Unauthorized users can read proxy contents during generation

diracgrid/dirac · GHSA-v6f3-gh5h-mqwx

high2024-04-09

CVE-2024-28235-Contao: Possible cookie sharing with external domains while checking protected pages for broken links

contao/contao · GHSA-9jh5-qf84-x6pr

high2024-04-09

CVE-2021-22573-google-oauth-java-client improperly verifies cryptographic signature

googleapis/google-oauth-java-client · GHSA-hw42-3568-wj87

medium2024-04-09

CVE-2022-47894-Apache Zeppelin SAP: connecting to a malicious SAP server allowed it to perform XXE

apache/zeppelin · GHSA-rr59-h6rh-v84v

medium2024-04-09

CVE-2024-31863-Apache Zeppelin: Replacing other users notebook, bypassing any permissions

apache/zeppelin · GHSA-m65c-wmw9-vmpp

high2024-04-09

CVE-2024-3046-Eclipse Kura LogServlet vulnerability

eclipse/kura · GHSA-frc2-w2cc-x794