Security advisories

medium2024-04-05

h2 servers vulnerable to degradation of service with CONTINUATION Flood

hyperium/h2 · GHSA-q6cp-qfwq-4gcv

medium2024-04-05

CVE-2024-3250-Pebble service manager's file pull API allows access by any user

canonical/pebble · GHSA-4685-2x5r-65pj

high2024-04-05

CVE-2024-27284-cassandra-rs's non-idiomatic use of iterators leads to use after free

metaswitch/cassandra-rs · GHSA-x9xc-63hg-vcfq

medium2024-04-05

CVE-2024-29221-Mattermost Server Improper Access Control

mattermost/mattermost · GHSA-w67v-ph4x-f48q

low2024-04-05

CVE-2024-21848-Mattermost Server Improper Access Control

mattermost/mattermost · GHSA-xp9j-8p68-9q93

critical2024-04-05

CVE-2024-27448-MailDev Remote Code Execution

maildev/maildev · GHSA-vc6q-ccj9-9r89

medium2024-04-04

CVE-2024-2660-HashiCorpVault does not correctly validate OCSP responses

hashicorp/vault · GHSA-j2rp-gmqv-frhv

high2024-04-04

CVE-2024-2700-quarkus-core leaks local environment variables from Quarkus namespace during application's build

quarkusio/quarkus · GHSA-f8h5-v2vg-46rr

high2024-04-04

CVE-2024-3116-pgAdmin Remote Code Execution (RCE) vulnerability

pgadmin-org/pgadmin4 · GHSA-27jx-ffw8-xrqv

medium2024-04-04

CVE-2024-31215-Mobile Security Framework (MobSF) vulnerable to SSRF in firebase database check

mobsf/mobile-security-framework-mobsf · GHSA-wpff-wm84-x5cx

high2024-04-04

CVE-2024-31206-dectalk-tts Uses Unencrypted HTTP Request

jstnmcbrd/dectalk-tts · GHSA-6cf6-8hvr-r68w

low2024-04-04

CVE-2024-30261-Undici's fetch with integrity option is too lax when algorithm is specified but hash value is in incorrect

nodejs/undici · GHSA-9qxr-qj54-h672

low2024-04-04

CVE-2024-30260-Undici's Proxy-Authorization header not cleared on cross-origin redirect for dispatch, request, stream, pipeline

nodejs/undici · GHSA-m4v8-wqvr-p9f7

medium2024-04-04

CVE-2024-2689-Temporal Server Denial of Service

temporalio/temporal · GHSA-wmxc-v39r-p9wf

low2024-04-03

CVE-2024-3178-Concrete CMS Cross-site Scripting (XSS) in the Advanced File Search Filter

concretecms/concretecms · GHSA-xwrh-qxmc-x8c8

low2024-04-03

CVE-2024-3179-Concrete CMS Stored XSS in the Custom Class page editing

concretecms/concretecms · GHSA-r7q4-cw9r-vhp4

low2024-04-03

CVE-2024-3181-Concrete CMS Stored XSS in the Search Field

concretecms/concretecms · GHSA-qgm9-rxmq-jxmq

low2024-04-03

CVE-2024-2753-Concrete CMS Stored XSS on the calendar color settings screen

concretecms/concretecms · GHSA-pj42-r64f-4xfq

low2024-04-03

CVE-2024-3180-Concrete CMS Stored XSS in blocks of type file

concretecms/concretecms · GHSA-9qhc-pg6j-wf23

high2024-04-03

amphp/http-client Denial of Service via HTTP/2 CONTINUATION Frames

amphp/http-client · GHSA-w8gf-g2vq-j2f4