Security advisories

medium2024-02-21

Uncaught Exception in Macro Expecting Native Function to Exist

surrealdb/surrealdb · GHSA-6wr5-jmpr-mjcx

medium2024-02-21

Uncaught Exception Handling Parsing Errors on Line Terminators

surrealdb/surrealdb · GHSA-8xff-473h-f863

medium2024-02-20

CVE-2024-25631-Unencrypted traffic between pods when using Wireguard and an external kvstore

cilium/cilium · GHSA-x989-52fc-4vr4

medium2024-02-20

CVE-2024-25630-Unencrypted ingress/health traffic when using Wireguard transparent encryption

cilium/cilium · GHSA-7496-fgv9-xw82

high2024-02-20

CVE-2024-25625-Pimcore Host Header Injection in user invitation link

pimcore/admin-ui-classic-bundle · GHSA-3qpq-6w89-f7mx

high2024-02-20

CVE-2024-23830-MantisBT Host Header Injection vulnerability

mantisbt/mantisbt · GHSA-mcqj-7p29-9528

medium2024-02-20

CVE-2023-51447-Cross-site scripting (XSS) in the dynamic file uploads

decidim/decidim · GHSA-9w99-78rj-hmxq

critical2024-02-20

CVE-2024-25141-Improper Certificate Validation in apache airflow mongo hook

apache/airflow · GHSA-x5pm-h33q-cjrw

medium2024-02-20

CVE-2023-48220-Possibility to circumvent the invitation token expiry period

decidim/decidim · GHSA-w3q8-m492-4pwp

medium2024-02-20

CVE-2023-47635-Possible CSRF attack at questionnaire templates preview

decidim/decidim · GHSA-f3qm-vfc3-jg6v

low2024-02-20

CVE-2023-47634-Race condition in Endorsements

decidim/decidim · GHSA-r275-j57c-7mf2

high2024-02-20

CVE-2024-23114-Deserialization of Untrusted Data in Apache Camel CassandraQL

apache/camel · GHSA-m43p-55rf-8c2j

high2024-02-20

CVE-2024-22369-Deserialization of Untrusted Data in Apache Camel SQL

apache/camel · GHSA-36xr-4x2f-cfj9

medium2024-02-20

CVE-2024-26270-Liferay Portal and Liferay DXP vulnerable to theft of hashed password

liferay/liferay-portal · GHSA-xq4r-4xfh-vch8

medium2024-02-20

CVE-2024-26268-Liferay Portal and Liferay DXP User Enumeration Vulnerability

liferay/liferay-portal · GHSA-qm43-g2xj-hvg5

critical2024-02-20

CVE-2024-25610-Liferay Portal has a Stored XSS with Blog entries (Insecure defaults)

liferay/liferay-portal · GHSA-vvpf-53qx-cxhh

medium2024-02-20

CVE-2024-26267-Liferay Portal and Liferay DXP HTTP Header Can Expose Versions

liferay/liferay-portal · GHSA-2mvj-q2q3-wxjv

medium2024-02-20

CVE-2024-26265-Liferay Portal vulnerable to Denial of Service

liferay/liferay-portal · GHSA-29xx-fhff-36m7

medium2024-02-20

CVE-2023-50270-Session Fixation Apache DolphinScheduler

apache/dolphinscheduler · GHSA-vjqc-g788-f378

high2024-02-20

CVE-2023-51770-Arbitrary File Read Vulnerability in Apache Dolphinscheduler

apache/dolphinscheduler · GHSA-ff2w-wm48-jhqj