Security advisories

critical2024-03-01

CVE-2024-27298-ZDI-CAN-19105: Parse Server literalizeRegexPart SQL Injection

parse-community/parse-server · GHSA-6927-3vr9-fxf2

medium2024-03-01

CVE-2024-27499-Bagist Cross-site Scripting vulnerability

bagisto/bagisto · GHSA-w5mx-334j-6fwv

high2024-03-01

CVE-2024-27138-Apache Archiva Incorrect Authorization vulnerability

apache/archiva · GHSA-rv4h-m4wc-v99w

medium2024-03-01

CVE-2024-27140-Apache Archiva Reflected Cross-site Scripting vulnerability

apache/archiva · GHSA-hp2x-6vrm-7j7v

high2024-03-01

CVE-2024-27139-Apache Archiva Incorrect Authorization vulnerability

apache/archiva · GHSA-h595-vwhc-3xwx

high2024-03-01

CVE-2024-27295-Directus has MySQL accent insensitive email matching

directus/directus · GHSA-qw9g-7549-7wg5

low2024-03-01

Potential leakage of Sentry auth tokens by React Native SDK with Expo plugin

getsentry/sentry-react-native · GHSA-68c2-4mpx-qh95

medium2024-03-01

CVE-2023-50378-Apache Ambari: Various Cross site scripting problems

apache/ambari · GHSA-9q6v-rxmw-g3gh

medium2024-03-01

CVE-2023-46950-Cross Site Scripting vulnerability in Contribsys Sidekiq

mhenrixon/sidekiq-unique-jobs · GHSA-fhx8-5c23-x7x5

medium2024-03-01

CVE-2024-26280-Apache Airflow: Incorrect Default Permissions in audit logs for Ops and Viewers users

apache/airflow · GHSA-6xwf-xvf3-v459

medium2024-03-01

CVE-2023-52555-mongo-express Cross-site Request Forgery vulnerability

mongo-express/mongo-express · GHSA-fffg-cwc9-xvj7

medium2024-03-01

CVE-2024-22891-Nteract Remote Code Execution vulnerability

nteract/nteract · GHSA-6jvg-hp25-42f6

medium2024-02-29

CVE-2024-27290-Docassemble HTML and javascript injection

jhpyle/docassemble · GHSA-pcfx-g2j2-f6f6

medium2024-02-29

CVE-2024-27291-Docassemble open redirect

jhpyle/docassemble · GHSA-7wxf-r2qv-9xwr

high2024-02-29

CVE-2024-27292-Docassemble unauthorized access through URL manipulation

jhpyle/docassemble · GHSA-jq57-3w7p-vwvv

medium2024-02-29

CVE-2024-27094-OpenZeppelin Contracts base64 encoding may read from potentially dirty memory

openzeppelin/openzeppelin-contracts · GHSA-9vx6-7xxf-x967

medium2024-02-29

CVE-2024-2001-Cockpit CMS Cross-Site Scripting vulnerability

cockpit-hq/cockpit · GHSA-q76r-7p4q-mqpw

medium2024-02-29

CVE-2024-1953-Mattermost fails to limit the number of role names

mattermost/mattermost · GHSA-vm9m-57jr-4pxh

low2024-02-29

CVE-2024-1952-Mattermost incorrectly allows access individual posts

mattermost/mattermost · GHSA-r4fm-g65h-cr54

medium2024-02-29

CVE-2024-1942-Mattermost allows attackers access to posts in channels they are not a member of

mattermost/mattermost · GHSA-hwjf-4667-gqwx