Security advisories

high2024-02-12

libgit2-sys affected by memory corruption, denial of service, and arbitrary code execution in libgit2

rust-lang/git2-rs · GHSA-22q8-ghmq-63vf

critical2024-02-12

CVE-2024-25108-Pixelfed doesn't check OAuth Scopes in API routes, giving elevated permissions

pixelfed/pixelfed · GHSA-gccq-h3xj-jgvf

high2024-02-12

CVE-2024-23833-OpenRefine JDBC Attack Vulnerability

openrefine/openrefine · GHSA-6p92-qfqf-qwx4

medium2024-02-12

CVE-2024-1439-Moodle Improper Access Control vulnerability

moodle/moodle · GHSA-5p2x-8427-9fgp

critical2024-02-11

CVE-2024-25718-Samly access control vulnerability

dropbox/samly · GHSA-h3rw-77w7-92gf

medium2024-02-11

CVE-2024-23724-Ghost has possible Cross-site Scripting issue

tryghost/ghost · GHSA-99vc-xw8j-phjm

high2024-02-10

CVE-2024-21490-angular vulnerable to super-linear runtime due to backtracking

angular/angular.js · GHSA-4w4v-5hc9-xrr2

low2024-02-09

CVE-2024-1247-Concrete CMS vulnerable to stored XSS via the Role Name field

concretecms/concretecms · GHSA-q25h-jch8-gfrp

low2024-02-09

CVE-2024-1245-Concrete CMS vulnerable to stored XSS in file tags and description attributes

concretecms/concretecms · GHSA-mgp6-j658-vcw9

low2024-02-09

CVE-2024-1246-Concrete CMS vulnerable to reflected XSS via the Image URL Import Feature

concretecms/concretecms · GHSA-9v3w-cj7m-qh5g

medium2024-02-09

CVE-2023-50298-Apache Solr's Streaming Expressions allow users to extract data from other Solr Clouds

apache/solr · GHSA-xrj7-x7gp-wwqr

high2024-02-09

CVE-2023-50291-Apache Solr can leak certain passwords due to System Property redaction logic inconsistencies

apache/solr · GHSA-3hwc-rqwp-v36q

medium2024-02-09

CVE-2024-1402-Mattermost vulnerable to denial of service via large number of emoji reactions

mattermost/mattermost · GHSA-32h7-7j94-8fc2

high2024-02-09

pqc_kyber KyberSlash: division timings depending on secrets

argyle-software/kyber · GHSA-x5j2-g63m-f8g4

high2024-02-09

CVE-2024-58264-serde-json-wasm stack overflow during recursive JSON parsing

cosmwasm/serde-json-wasm · GHSA-rr69-rxr6-8qwf

low2024-02-09

CVE-2024-24776-Mattermost fails to check the required permissions

mattermost/mattermost · GHSA-r833-w756-h5p2

low2024-02-09

CVE-2024-23319-Mattermost Jira Plugin vulnerable to Cross-Site Request Forgery

mattermost/mattermost-plugin-jira · GHSA-4fp6-574p-fc35

medium2024-02-09

CVE-2024-24828-Pkg Local Privilege Escalation

vercel/pkg · GHSA-22r3-9w55-cj54

medium2024-02-09

CVE-2024-23639-Micronaut management endpoints vulnerable to drive-by localhost attack

micronaut-projects/micronaut-core · GHSA-583g-g682-crxf

medium2024-02-09

CVE-2024-21624-NoneBot Potential Information Leak in User-Constructed Message Templates

nonebot/nonebot2 · GHSA-59j8-776v-xxxg