Security Advisories | GitStock

low2024-02-03

Etcd auth Inaccurate logging of authentication attempts for users with CN-based auth only

etcd-io/etcd · GHSA-vjg6-93fv-qv64

low2024-02-03

Etcd embed auto compaction retention negative value causing a compaction loop or a crash

etcd-io/etcd · GHSA-pm3m-32r3-7mfh

low2024-02-03

Etcd pkg Insecure ciphers are allowed by default

etcd-io/etcd · GHSA-5x4g-q5rc-36jp

medium2024-02-02

CVE-2006-5734-PHPMailer Local file inclusion

phpmailer/phpmailer · GHSA-8jc3-5p29-qgjx

high2024-02-02

CVE-2007-3215-PHPMailer Shell command injection

phpmailer/phpmailer · GHSA-6h78-85v2-mmch

high2024-02-02

CVE-2023-51838-Ylianst MeshCentral 1.1.16 suffers from Use of a Broken or Risky Cryptographic Algorithm.

ylianst/meshcentral · GHSA-v269-rrr6-cx6r

high2024-02-02

Talos Linux ships runc vulnerable to the escape to the host attack

siderolabs/talos · GHSA-g5p6-327m-3fxx

low2024-02-02

CVE-2024-24560-Vyper's external calls can overflow return data to return input buffer

vyperlang/vyper · GHSA-gp3w-2v2m-p686

medium2024-02-02

CVE-2024-23635-Malicious input can provoke XSS when preserving comments

nahsra/antisamy · GHSA-2mrq-w8pv-5pvq

critical2024-02-02

CVE-2024-1143-Central Dogma Authentication Bypass Vulnerability via Session Leakage

line/centraldogma · GHSA-34q3-p352-c7q8

medium2024-02-02

CVE-2024-21485-Dash apps vulnerable to Cross-site Scripting

plotly/dash · GHSA-547x-748v-vp6p

low2024-02-01

CVE-2024-24754-Bref vulnerable to Body Parsing Inconsistency in Event-Driven Functions

brefphp/bref · GHSA-82vx-mm6r-gg8w

medium2024-02-01

CVE-2024-24753-Bref Doesn't Support Multiple Value Headers in ApiGatewayFormatV2

brefphp/bref · GHSA-99f9-gv72-fw9r

medium2024-02-01

CVE-2024-24752-Bref's Uploaded Files Not Deleted in Event-Driven Functions

brefphp/bref · GHSA-x4hh-frx8-98r5

high2024-02-01

CVE-2024-24570-Statmic CMS vulnerable to account takeover via XSS and password reset link

statamic/cms · GHSA-vqxq-hvxw-9mv9

critical2024-02-01

CVE-2024-24561-Vyper's bounds check on built-in `slice()` function can be overflowed

vyperlang/vyper · GHSA-9x7f-gwxq-6f2c

medium2024-02-01

CVE-2024-24557-Classic builder cache poisoning

moby/moby · GHSA-xw73-rw38-6vjc

high2024-02-01

CVE-2024-24747-Minio unsafe default: Access keys inherit `admin` of root user, allowing privilege escalation

minio/minio · GHSA-xx8w-mq23-29g4

medium2024-02-01

CVE-2024-1141-glance-store logs s3 access keys

openstack/glance_store · GHSA-wgpq-p2hm-56v9

medium2024-02-01

CVE-2024-0831-Hashicorp Vault may expose sensitive log information

hashicorp/vault · GHSA-vgh3-mwxq-rcp8