Security advisories

medium2024-01-30

CVE-2020-10660-HashiCorp Vault Improper Privilege Management

View chart →

hashicorp/vault · GHSA-m979-w9wj-qfj9

critical2024-01-30

CVE-2020-10661-HashiCorp Vault Improper Privilege Management

View chart →

hashicorp/vault · GHSA-j6vv-vv26-rh7c

high2024-01-30

CVE-2024-23838-TrueLayer.Client SSRF when fetching payment or payment provider

View chart →

truelayer/truelayer-dotnet · GHSA-67m4-qxp3-j6hh

medium2024-01-30

CVE-2024-23840-`goreleaser release --debug` shows secrets

View chart →

goreleaser/goreleaser · GHSA-h3q2-8whx-c29h

high2024-01-30

CVE-2024-23841-@apollo/experimental-nextjs-app-support Cross-site Scripting vulnerability

View chart →

apollographql/apollo-client-nextjs · GHSA-rv8p-rr2h-fgpg

high2024-01-30

CVE-2024-24556-@urql/next Cross-site Scripting vulnerability

View chart →

urql-graphql/urql · GHSA-qhjf-hm5j-335w

high2024-01-30

CVE-2024-24558-react-query-streamed-hydration Cross-site Scripting vulnerability

View chart →

tanstack/query · GHSA-997g-27x8-43rf

medium2024-01-30

CVE-2024-24565-CrateDB database has an arbitrary file read vulnerability

View chart →

crate/crate · GHSA-475g-vj6c-xf96

low2024-01-30

CVE-2024-22193-vantage6 may create unencrypted tasks in encrypted collaboration

View chart →

vantage6/vantage6 · GHSA-rjmv-52mp-gjrr

low2024-01-30

CVE-2024-21671-vantage6 vulnerable to username timing attack

View chart →

vantage6/vantage6 · GHSA-45gq-q4xh-cp53

medium2024-01-30

CVE-2024-21653-vantage6 has insecure SSH configuration for node and server containers

View chart →

vantage6/vantage6 · GHSA-2wgc-48g2-cj5w

high2024-01-30

CVE-2024-21649-vantage6 remote code execution vulnerability

View chart →

vantage6/vantage6 · GHSA-w9h2-px87-74vx

medium2024-01-30

CVE-2024-24567-Vyper's raw_call `value=` kwargs not disabled for static and delegate calls

View chart →

vyperlang/vyper · GHSA-x2c2-q32w-4w6m

medium2024-01-30

CVE-2023-36259-Craft CMS Audit Plugin Cross Site Scripting vulnerability

View chart →

sjelfull/craft-audit · GHSA-v89q-c273-3p42

high2024-01-30

CVE-2023-36260-Craft CMS Feed-Me

View chart →

craftcms/feed-me · GHSA-6p78-f7h9-6838

high2024-01-30

CVE-2024-21488-network Arbitrary Command Injection vulnerability

View chart →

tomas/network · GHSA-vvh2-82c7-ppfg

critical2024-01-30

CVE-2023-51837-Ylianst MeshCentral Missing SSL Certificate Validation

View chart →

ylianst/meshcentral · GHSA-8xw6-9h78-c89j

high2024-01-30

CVE-2023-51982-CrateDB authentication bypass vulnerability

View chart →

crate/crate · GHSA-7mgx-gvjw-m3w3

high2024-01-29

CVE-2024-23334-aiohttp is vulnerable to directory traversal

View chart →

aio-libs/aiohttp · GHSA-5h86-8mv2-jq9f

high2024-01-29

CVE-2024-23647-Authentik vulnerable to PKCE downgrade attack

View chart →

goauthentik/authentik · GHSA-mrx3-gxjx-hjqj