Security advisories

low2024-01-23

CVE-2024-23329-changedetection.io API endpoint is not secured with API token

View chart →

dgtlmoon/changedetection.io · GHSA-hcvp-2cc7-jrwr

medium2024-01-23

CVE-2023-48714-Record titles for restricted records can be viewed if exposed by GridFieldAddExistingAutocompleter

View chart →

silverstripe/silverstripe-framework · GHSA-qm2j-qvq3-j29v

medium2024-01-23

CVE-2023-44401-View permissions are bypassed for paginated lists of ORM data

View chart →

silverstripe/silverstripe-graphql · GHSA-jgph-w8rh-xf5p

high2024-01-22

CVE-2024-23342-Minerva timing attack on P-256 in python-ecdsa

View chart →

tlsfuzzer/python-ecdsa · GHSA-wj6h-64fc-37mp

medium2024-01-22

CVE-2024-23341-html injection vulnerability in the `tuitse_html` function.

View chart →

i3thuan5/tuitse-tsusin · GHSA-m4m5-j36m-8x72

low2024-01-22

CVE-2024-58266-Multiple issues involving quote API in shlex

View chart →

comex/rust-shlex · GHSA-r7qv-8r2h-pg27

critical2024-01-22

CVE-2017-20189-Clojure classes can be used to craft a serialized object that runs arbitrary code on deserialization

View chart →

clojure/clojure · GHSA-jgxc-8mwq-9xqw

high2024-01-22

CVE-2023-52354-chasquid HTTP Request/Response Smuggling vulnerability

View chart →

albertito/chasquid · GHSA-g4x3-mfpj-f335

high2024-01-22

CVE-2024-23750-Code execution in metagpt

View chart →

geekan/metagpt · GHSA-g7ph-8423-pf4j

critical2024-01-22

CVE-2024-23752-Code execution in pandasai

View chart →

gventuri/pandas-ai · GHSA-5g73-69p4-7gvx

critical2024-01-22

CVE-2024-23751-SQL injection in llama-index

View chart →

run-llama/llama_index · GHSA-2jxw-4hm4-6w87

critical2024-01-21

CVE-2024-23731-Code execution in Embedchain

View chart →

embedchain/embedchain · GHSA-rhhj-5436-95vf

critical2024-01-21

CVE-2024-23730-Unsafe yaml deserialization in llama-hub

View chart →

run-llama/llama-hub · GHSA-297x-2qf3-jrj3

medium2024-01-21

CVE-2024-23725-Cross-site Scripting in Ghost

View chart →

tryghost/ghost · GHSA-fh38-9fgr-454w

critical2024-01-20

CVE-2024-0521-Code Injection in paddlepaddle

View chart →

paddlepaddle/paddle · GHSA-chj7-w3f6-cvfj

medium2024-01-20

CVE-2024-23686-Insertion of Sensitive Information into Log File in OWASP DependencyCheck

View chart →

jeremylong/dependencycheck · GHSA-frxm-v7q3-v2wv

medium2024-01-19

CVE-2024-23332-Go package github.com/notaryproject/notation configured with permissive trust policies potentially susceptible to rollback attack from compromised registry

View chart →

notaryproject/specifications · GHSA-57wx-m636-g3g8

high2024-01-19

SPV Merkle proof malleability allows the maintainer to prove invalid transactions

View chart →

keep-network/tbtc-v2 · GHSA-wg2x-rv86-mmpx

high2024-01-19

CVE-2024-23331-Vite dev server option `server.fs.deny` can be bypassed when hosted on case-insensitive filesystem

View chart →

vitejs/vite · GHSA-c24v-8rfc-w8vw

critical2024-01-19

CVE-2023-50447-Arbitrary Code Execution in Pillow

View chart →

python-pillow/pillow · GHSA-3f63-hfp8-52jq