Security advisories

medium2024-03-20

CVE-2024-23819-GeoServer's MapML HTML Page vulnerable to Stored Cross-Site Scripting (XSS)

geoserver/geoserver · GHSA-7x76-57fr-m5r5

medium2024-03-20

CVE-2024-23818-GeoServer's WMS OpenLayers Format vulnerable to Stored Cross-Site Scripting (XSS)

geoserver/geoserver · GHSA-fcpm-hchj-mh72

medium2024-03-20

CVE-2024-23643-GeoServer's GWC Seed Form vulnerable to Stored Cross-Site Scripting (XSS)

geoserver/geoserver · GHSA-56r3-f536-5gf7

medium2024-03-20

CVE-2024-23642-GeoServer's Simple SVG Renderer vulnerable to Stored Cross-Site Scripting (XSS)

geoserver/geoserver · GHSA-fg9v-56hw-g525

medium2024-03-20

CVE-2024-23640-GeoServer's Style Publisher vulnerable to Stored Cross-Site Scripting (XSS)

geoserver/geoserver · GHSA-9rfr-pf2x-g4xf

medium2024-03-20

CVE-2024-23634-GeoServer Arbitrary file renaming vulnerability in REST Coverage/Data Store API

geoserver/geoserver · GHSA-75m5-hh4r-q9gx

medium2024-03-20

CVE-2023-51445-Stored Cross-Site Scripting (XSS) vulnerability in GeoServer's REST Resources API

geoserver/geoserver · GHSA-fh7p-5f6g-vj2w

high2024-03-20

CVE-2023-51444-Arbitrary file upload vulnerability in GeoServer's REST Coverage Store API

geoserver/geoserver · GHSA-9v5q-2gwq-q9hq

high2024-03-20

CVE-2023-41877-GeoServer log file path traversal vulnerability

geoserver/geoserver · GHSA-8g7v-vjrc-x4g5

critical2024-03-19

CVE-2024-29027-Server crashes on invalid Cloud Function or Cloud Job name

parse-community/parse-server · GHSA-6hh7-46r2-vf29

high2024-03-19

Container escape at build time

containers/buildah · GHSA-pmf3-c36m-g5cf

medium2024-03-19

CVE-2023-50966-erlang-jose vulnerable to denial of service via large p2c value

potatosalad/erlang-jose · GHSA-9mg4-v392-8j68

medium2024-03-19

CVE-2024-27439-Cross-Site Request Forgery in Apache Wicket

apache/wicket · GHSA-8vvp-525h-cxf9

medium2024-03-19

CVE-2024-24683-Improper Input Validation vulnerability in Apache Hop Engine

apache/hop · GHSA-f6g6-pjgc-5cj5

high2024-03-19

CVE-2024-24042-Path traversal in flaskcode Devan-Kerman ARRP

devan-kerman/arrp · GHSA-cg24-jjr5-rxmf

medium2024-03-19

CVE-2024-21504-Cross-site Scripting in livewire/livewire

livewire/livewire · GHSA-389c-cf87-qmwj

medium2024-03-19

CVE-2024-21503-Black vulnerable to Regular Expression Denial of Service (ReDoS)

psf/black · GHSA-fj7x-q9j7-g6q6

low2024-03-18

CVE-2024-28864-[TagAwareCipher] - Decryption Failure (Regex Match)

ilicmiljan/secure-props · GHSA-rj29-j2g4-77q8

high2024-03-18

CVE-2024-28865-Denial of service via regular expression

django-wiki/django-wiki · GHSA-wj85-w4f4-xh8h

medium2024-03-18

CVE-2024-28859-Gadget chain in Symfony 1 due to vulnerable Swift Mailer dependency

friendsofsymfony1/symfony1 · GHSA-wjv8-pxr6-5f4r