Security advisories

high2024-04-03

CVE-2024-2653-AMPHP Denial of Service via HTTP/2 CONTINUATION Frames

amphp/http · GHSA-qjfw-cvjf-f4fm

medium2024-04-03

CVE-2024-31209-OpenID Connect client Atom Exhaustion in provider configuration worker ets table location

erlef/oidcc · GHSA-mj35-2rgf-cv8p

medium2024-04-03

CVE-2024-31207-Vite's `server.fs.deny` did not deny requests for patterns with directories.

vitejs/vite · GHSA-8jhw-289h-jh2g

medium2024-04-03

CVE-2024-31420-KubeVirt NULL pointer dereference flaw

kubevirt/kubevirt · GHSA-vjhf-6xfr-5p9g

high2024-04-03

CVE-2024-30265-Voilà Local file inclusion

voila-dashboards/voila · GHSA-2q59-h24c-w6fg

medium2024-04-03

CVE-2024-29477-Dolibarr ERP CRM Code Injection vulnerability during installation

dolibarr/dolibarr · GHSA-p73x-rpgm-3v56

critical2024-04-03

CVE-2021-27312-Gleez Cms Server Side Request Forgery (SSRF) vulnerability

gleez/cms · GHSA-7mxg-r76p-363g

high2024-04-03

CVE-2024-28219-Pillow buffer overflow vulnerability

python-pillow/pillow · GHSA-44wm-f244-xhp3

medium2024-04-02

CVE-2024-29834-Apache Pulsar: Improper Authorization For Namespace and Topic Management Endpoints

apache/pulsar · GHSA-7mg2-6c6v-342r

low2024-04-02

CVE-2024-30266-Wasmtime vulnerable to panic when using a dropped extenref-typed element segment

bytecodealliance/wasmtime · GHSA-75hq-h6g9-h4q5

medium2024-04-02

CVE-2024-2435-Temporal UI Server cross-site scripting vulnerability

temporalio/ui-server · GHSA-8f25-w7qj-r7hc

medium2024-04-02

CVE-2024-30173-OpenID Connect Authentication (oidc) Typo3 extension Authentication Bypass

xperseguers/t3ext-oidc · GHSA-hhf8-f5w9-g6vh

medium2024-04-02

CVE-2024-22780-CA17 TeamsACS Cross Site Scripting vulnerability

ca17/teamsacs · GHSA-hwvw-gh23-qpvq

high2024-04-02

CVE-2024-22189-QUIC's Connection ID Mechanism vulnerable to Memory Exhaustion Attack

quic-go/quic-go · GHSA-c33x-xqrf-c478

medium2024-04-02

CVE-2024-1300-Eclipse Vert.x vulnerable to a memory leak in TCP servers

eclipse-vertx/vert.x · GHSA-9ph3-v2vh-3qx7

high2024-04-02

CVE-2024-3137-UVDesk Community Helpdesk Improper Privilege Management

uvdesk/core-framework · GHSA-57q5-h622-3cpx

low2024-04-02

CVE-2024-3138-RosarioSIS cross site scripting vulnerability

francoisjacquet/rosariosis · GHSA-r32g-w9cv-9fgc

high2024-04-02

CVE-2024-23115-Centreon updateGroups SQL Injection Remote Code Execution Vulnerability

centreon/centreon · GHSA-qjvm-p5vg-437c

high2024-04-02

CVE-2024-23117-Centreon updateContactServiceCommands SQL Injection Remote Code Execution Vulnerability

centreon/centreon · GHSA-j8hg-v5qv-9m28

high2024-04-02

CVE-2024-23116-Centreon updateLCARelation SQL Injection Remote Code Execution Vulnerability

centreon/centreon · GHSA-j4pc-vqvc-4p9x