Security advisories

medium2024-04-09

CVE-2024-31862-Apache Zeppelin: Denial of service with invalid notebook name

apache/zeppelin · GHSA-6623-c6mr-6737

medium2024-04-09

CVE-2021-28656-Apache Zeppelin CSRF vulnerability in the Credentials page

apache/zeppelin · GHSA-prvg-rh5h-74jr

medium2024-04-09

CVE-2024-31860-Apache Zeppelin Path Traversal vulnerability

apache/zeppelin · GHSA-g64r-xf39-q4p5

high2024-04-09

CVE-2024-1233-WildFly Elytron: SSRF security issue

wildfly-security/wildfly-elytron · GHSA-v4mm-q8fv-r2w5

high2024-04-08

CVE-2024-28224-Ollama DNS rebinding vulnerability

ollama/ollama · GHSA-5jx5-hqx5-2vrj

medium2024-04-08

CVE-2024-31447-Shopware Improper Session Handling in store-api account logout

shopware/shopware · GHSA-5297-wrrp-rcj7

high2024-04-08

CVE-2024-28732-Ryu Infinite Loop vulnerability

faucetsdn/ryu · GHSA-p28x-hj68-7vfp

medium2024-04-07

CVE-2021-4438-React Native Sms User Consent Intent Redirection Vulnerability

kyivstarteam/react-native-sms-user-consent · GHSA-r956-2553-vvhr

medium2024-04-06

CVE-2024-0406-Archiver Path Traversal vulnerability

mholt/archiver · GHSA-rhh4-rh7c-7r5v

low2024-04-06

CVE-2024-3366-Xuxueli xxl-job template injection vulnerability

xuxueli/xxl-job · GHSA-2v42-xp3j-47m4

high2024-04-05

CVE-2024-1313-Grafana: Users outside an organization can delete a snapshot with its key

grafana/grafana · GHSA-67rv-qpw2-6qrr

critical2024-04-05

ibc-go: Potential Reentrancy using Timeout Callbacks in ibc-hooks

cosmos/ibc-go · GHSA-j496-crgh-34mx

medium2024-04-05

CVE-2024-31454-PsiTransfer: File integrity violation

psi-4ward/psitransfer · GHSA-2p2x-p7wj-j5h2

medium2024-04-05

CVE-2024-31453-PsiTransfer: Violation of the integrity of file distribution

psi-4ward/psitransfer · GHSA-xg8v-m2mh-45m6

medium2024-04-05

libdav1d-sys affected by dav1d AV1 decoder integer overflow

njaard/libavif-rs · GHSA-mc39-h54g-pvw6

medium2024-04-05

CVE-2023-53156-transpose: Buffer overflow due to integer overflow

ejmahler/transpose · GHSA-5gmm-6m36-r7jh

high2024-04-05

crayon: ObjectPool creates uninitialized memory when freeing objects

shawnscode/crayon · GHSA-xfhw-6mc4-mgxf

high2024-04-05

whoami stack buffer overflow on several Unix platforms

ardaku/whoami · GHSA-w5w5-8vfh-xcjq

high2024-04-05

eyre: Parts of Report are dropped as the wrong type during downcast

eyre-rs/eyre · GHSA-4v52-7q2x-v4xj

high2024-04-05

HPACK decoder panics on invalid input

mlalic/hpack-rs · GHSA-w7hm-hmxv-pvhf