Security advisories

high2024-03-25

CVE-2024-29189-ansys-geometry-core OS Command Injection vulnerability

ansys/pyansys-geometry · GHSA-38jr-29fh-w9vm

high2024-03-25

CVE-2024-29194-OneUptime Vulnerable to a Privilege Escalation via Local Storage Key Manipulation

oneuptime/oneuptime · GHSA-246p-xmg8-wmcq

low2024-03-25

CVE-2024-27281-RDoc RCE vulnerability with .rdoc_options

ruby/rdoc · GHSA-592j-995h-p23j

critical2024-03-25

CVE-2024-27280-StringIO buffer overread vulnerability

ruby/stringio · GHSA-v5h6-c2hv-hv3r

high2024-03-25

WiX Burn-based bundles are vulnerable to binary hijack when run as SYSTEM

nirbar/wix4 · GHSA-g4v6-69p6-q3p4

high2024-03-25

WiX Burn-based bundles are vulnerable to binary hijack when run as SYSTEM

nirbar/wix3 · GHSA-wq88-fq4x-h2pm

low2024-03-25

CVE-2024-29196-phpMyFAQ Path Traversal in Attachments

thorsten/phpmyfaq · GHSA-mmh6-5cpf-2c72

critical2024-03-25

[email protected]/paths Prototype Pollution vulnerability

thi-ng/umbrella · GHSA-8ppr-www8-hfjx

high2024-03-23

CVE-2024-1603-PaddlePaddle allows arbitrary file read via paddle.vision.ops.read_file

paddlepaddle/paddle · GHSA-jwrc-3v3f-5cq5

high2024-03-22

CVE-2024-29190-SSRF Vulnerability on assetlinks_check(act_name, well_knowns)

mobsf/mobile-security-framework-mobsf · GHSA-wfgj-wrgh-h3r3

high2024-03-22

CVE-2023-5685-XNIO denial of service vulnerability

xnio/xnio · GHSA-7f88-5hhx-67m2

high2024-03-22

CVE-2024-29499-Cross-Site Request Forgery in Anchor CMS

anchorcms/anchor-cms · GHSA-4xw8-9fj7-j58j

medium2024-03-22

CVE-2024-29338-Cross-Site Request Forgery in Anchor CMS

anchorcms/anchor-cms · GHSA-2whx-ccr7-fxqm

medium2024-03-22

CVE-2024-29186-Slow String Operations via MultiPart Requests in Event-Driven Functions

brefphp/bref · GHSA-j4hq-f63x-f39r

medium2024-03-22

CVE-2024-29042-Cache Poisoning Vulnerability

franciscop/translate · GHSA-882j-4vj5-7vmj

medium2024-03-22

CVE-2024-28863-Denial of service while parsing a tar file due to lack of folders count validation

isaacs/node-tar · GHSA-f5x3-32g6-xq36

medium2024-03-22

CVE-2024-28861-Gadget chain in Symfony 1 due to uncontrolled unserialized input in sfNamespacedParameterHolder

friendsofsymfony1/symfony1 · GHSA-pv9j-c53q-h433

high2024-03-22

CVE-2024-28119-Server Side Template Injection (SSTI) via Twig escape handler

getgrav/grav · GHSA-2m7x-c7px-hp58

high2024-03-22

CVE-2024-28118-Server Side Template Injection (SSTI)

getgrav/grav · GHSA-r6vw-8v8r-pmp4

high2024-03-22

CVE-2024-28117-Server Side Template Injection (SSTI)

getgrav/grav · GHSA-qfv4-q44r-g7rv