Security advisories

high2024-02-15

CVE-2024-1892-Scrapy vulnerable to ReDoS via XMLFeedSpider

scrapy/scrapy · GHSA-cc65-xxvf-f7r9

medium2024-02-14

CVE-2024-25125-Absolute path traversal vulnerability in digdag server

treasure-data/digdag · GHSA-5mp4-32rr-v3x5

medium2024-02-14

CVE-2024-1485-registry-support: decompress can delete files outside scope via relative paths

devfile/registry-support · GHSA-84xv-jfrm-h4gm

medium2024-02-13

CVE-2023-6152-Email Validation Bypass And Preventing Sign Up From Email's Owner

grafana/grafana · GHSA-3hv4-r2fm-h27f

critical2024-02-13

CVE-2024-0057-NuGet Client Security Feature Bypass Vulnerability

nuget/nuget.client · GHSA-68w7-72jg-6qpp

high2024-02-13

CVE-2024-22188-TYPO3 Install Tool vulnerable to Code Execution

typo3/typo3 · GHSA-5w2h-59j3-8x5w

high2024-02-13

CVE-2024-21386-Microsoft Security Advisory CVE-2024-21386: .NET Denial of Service Vulnerability

dotnet/aspnetcore · GHSA-g74q-5xw3-j7q9

medium2024-02-13

CVE-2023-30451-Path Traversal in TYPO3 File Abstraction Layer Storages

typo3/typo3 · GHSA-w6x2-jg8h-p6mp

high2024-02-13

CVE-2024-25122-XSS sidekiq-unique-jobs UI server vulnerability

mhenrixon/sidekiq-unique-jobs · GHSA-cmh9-rx85-xj38

high2024-02-13

CVE-2024-25121-TYPO3 vulnerable to Improper Access Control Persisting File Abstraction Layer Entities via Data Handler

typo3/typo3 · GHSA-rj3x-wvc6-5j66

medium2024-02-13

CVE-2024-25120-TYPO3 vulnerable to Improper Access Control of Resources Referenced by t3:// URI Scheme

typo3/typo3 · GHSA-wf85-8hx9-gj7c

medium2024-02-13

CVE-2024-25119-TYPO3 Install Tool vulnerable to Information Disclosure of Encryption Key

typo3/typo3 · GHSA-h47m-3f78-qp9g

medium2024-02-13

CVE-2024-24751-derhansen/sf_event_mgt vulnerable to Broken Access Control in Backend Module

derhansen/sf_event_mgt · GHSA-4576-pgh2-g34j

medium2024-02-13

CVE-2024-25118-TYPO3 Backend Forms vulnerable to Information Disclosure of Hashed Passwords

typo3/typo3 · GHSA-38r2-5695-334w

medium2024-02-13

CVE-2024-1163-mapshaper Path Traversal vulnerability

mbloch/mapshaper · GHSA-8m36-62rw-9mxw

medium2024-02-13

CVE-2024-21491-svix vulnerable to Authentication Bypass

svix/svix-webhooks · GHSA-747x-5m58-mq97

medium2024-02-13

CVE-2023-52430-caddy-security plugin for Caddy vulnerable to reflected Cross-site Scripting

greenpau/caddy-security · GHSA-xwmv-cx7p-fqfc

medium2024-02-12

Drupal core Denial of Service vulnerability

drupal/core · GHSA-6ccv-8fgf-cjpw

low2024-02-12

CVE-2021-4437-lambda-middleware Inefficient Regular Expression Complexity vulnerability

dbartholomae/lambda-middleware · GHSA-m3f4-957x-m785

high2024-02-12

CVE-2024-24762-python-multipart vulnerable to Content-Type Header ReDoS

kludex/python-multipart · GHSA-2jv5-9r88-3w3p