Security advisories

high2024-02-01

CVE-2021-43798-Grafana path traversal

View chart →

grafana/grafana · GHSA-8pjx-jj86-j47p

low2024-02-01

CVE-2022-39394-wasmtime_trap_code C API function has out of bounds write vulnerability

View chart →

bytecodealliance/wasmtime · GHSA-h84q-m8rr-3v9q

medium2024-01-31

CVE-2021-41091-Moby (Docker Engine) Insufficiently restricted permissions on data directory

View chart →

moby/moby · GHSA-3fwx-pjgw-3558

high2024-01-31

CVE-2018-12608-Docker Authentication Bypass

View chart →

moby/moby · GHSA-qrqr-3x5j-2xw9

medium2024-01-31

CVE-2019-19499-Grafana Arbitrary File Read

View chart →

grafana/grafana · GHSA-4pwp-cx67-5cpx

high2024-01-31

CVE-2024-21626-runc vulnerable to container breakout through process.cwd trickery and leaked fds

View chart →

opencontainers/runc · GHSA-xr7r-f8xq-vfvv

medium2024-01-31

CVE-2024-23650-BuildKit vulnerable to possible panic when incorrect parameters sent from frontend

View chart →

moby/buildkit · GHSA-9p26-698r-w4hx

high2024-01-31

CVE-2024-23651-BuildKit vulnerable to possible race condition with accessing subpaths from cache mounts

View chart →

moby/buildkit · GHSA-m3r6-h7wv-7xxv

critical2024-01-31

CVE-2024-23652-BuildKit vulnerable to possible host system access from mount stub cleaner

View chart →

moby/buildkit · GHSA-4v98-7qmw-rqr8

critical2024-01-31

CVE-2024-23653-Buildkit's interactive containers API does not validate entitlements check

View chart →

moby/buildkit · GHSA-wr6v-9f75-vh2g

medium2024-01-31

nodemailer ReDoS when trying to send a specially crafted email

View chart →

nodemailer/nodemailer · GHSA-9h6g-pr28-7cqp

medium2024-01-31

CVE-2024-24579-stereoscope vulnerable to tar path traversal when processing OCI tar archives

View chart →

anchore/stereoscope · GHSA-hpxr-w9w7-g4gv

medium2024-01-31

C5 Firefly III CSV Injection.

View chart →

firefly-iii/firefly-iii · GHSA-29w6-c52g-m8jc

medium2024-01-31

CVE-2024-24566-@lobehub/chat vulnerable to unauthorized access to plugins

View chart →

lobehub/lobe-chat · GHSA-pf55-fj96-xf37

medium2024-01-31

CVE-2024-23637-OctoPrint Unverified Password Change via Access Control Settings

View chart →

octoprint/octoprint · GHSA-5626-pw9c-hmjr

medium2024-01-31

CVE-2023-47116-Label Studio SSRF on Import Bypassing `SSRF_PROTECTION_ENABLED` Protections

View chart →

humansignal/label-studio · GHSA-p59w-9gqw-wj8r

medium2024-01-31

CVE-2023-44312-Apache ServiceComb Service-Center Exposure of Sensitive Information to an Unauthorized Actor vulnerability

View chart →

apache/servicecomb-service-center · GHSA-r8xp-52mq-rmm8

low2024-01-31

CVE-2024-22236-Spring Cloud Contract vulnerable to local information disclosure

View chart →

spring-cloud/spring-cloud-contract · GHSA-p6rp-mx85-m459

high2024-01-31

CVE-2023-44313-Apache ServiceComb Service-Center Server-Side Request Forgery vulnerability

View chart →

apache/servicecomb-service-center · GHSA-9xc9-xq7w-vpcr

high2024-01-31

CVE-2020-16251-HashiCorp Vault Authentication bypass

View chart →

hashicorp/vault · GHSA-4mp7-2m29-gqxf