Security advisories

high2024-01-19

CVE-2024-22424-github.com/argoproj/argo-cd Cross-Site Request Forgery vulnerability

View chart →

argoproj/argo-cd · GHSA-92mw-q256-5vwg

high2024-01-19

SurrealDB vulnerable to Uncontrolled CPU Consumption via WebSocket Interface

View chart →

surrealdb/surrealdb · GHSA-58j9-j2fj-v8f4

high2024-01-19

CVE-2024-22421-JupyterLab vulnerable to potential authentication and CSRF tokens leak

View chart →

jupyterlab/jupyterlab · GHSA-44cc-43rp-5947

medium2024-01-19

CVE-2024-22420-JupyterLab vulnerable to SXSS in Markdown Preview

View chart →

jupyterlab/jupyterlab · GHSA-4m77-cmpx-vjc4

high2024-01-19

CVE-2024-22419-concat built-in can corrupt memory in vyper

View chart →

vyperlang/vyper · GHSA-2q8v-3gqq-4f8p

high2024-01-19

Validation of `VoteExtensionsEnableHeight` can cause chain halt in Go package github.com/cometbft/cometbft

View chart →

cometbft/cometbft · GHSA-qr8r-m495-7hc4

critical2024-01-19

CVE-2024-22416-Cross-Site Request Forgery on any API call in pyLoad may lead to admin privilege escalation

View chart →

pyload/pyload · GHSA-pgpj-v85q-h5fm

medium2024-01-19

Resource exhaustion vulnerability in h2 may lead to Denial of Service (DoS)

View chart →

hyperium/h2 · GHSA-8r5v-vm4m-4g25

high2024-01-19

CVE-2024-21484-Marvin Attack of RSA and RSAOAEP decryption in jsrsasign

View chart →

kjur/jsrsasign · GHSA-rh63-9qcf-83gf

medium2024-01-19

CVE-2024-21733-Apache Tomcat vulnerable to Generation of Error Message Containing Sensitive Information

View chart →

apache/tomcat · GHSA-f4qf-m5gf-8jm8

high2024-01-18

CVE-2024-22415-Unsecured endpoints in the jupyter-lsp server extension

View chart →

jupyter-lsp/jupyterlab-lsp · GHSA-4qhp-652w-c22x

medium2024-01-18

Uncontrolled Recursion in SurrealQL Parsing

View chart →

surrealdb/surrealdb · GHSA-6r8p-hpg7-825g

high2024-01-18

CVE-2024-58368-Uncaught Exception processing HTTP Headers in SurrealDB

View chart →

surrealdb/surrealdb · GHSA-m24x-r6q3-2vp9

medium2024-01-18

Uncaught Exception in surrealdb

View chart →

surrealdb/surrealdb · GHSA-jm4v-58r5-66hj

high2024-01-18

CVE-2024-0669-Cross-Frame Scripting vulnerability has been found on Plone CMS

View chart →

plone/plone · GHSA-5xfx-55x4-j223

medium2024-01-17

CVE-2024-22411-Cross-site scripting (XSS) in Action messages on Avo

View chart →

avo-hq/avo · GHSA-g8vp-2v5p-9qfh

high2024-01-17

crystals-go vulnerable to KyberSlash (timing side-channel attack for Kyber)

View chart →

kudelskisecurity/crystals-go · GHSA-f6jh-hvg2-9525

medium2024-01-17

use-after-free in tracing

View chart →

tokio-rs/tracing · GHSA-8f24-6m29-wm2r

low2024-01-17

ferris-says has undefined behavior when not using UTF-8

View chart →

mgattozzi/ferris-says · GHSA-v363-rrf2-5fmj

medium2024-01-17

CVE-2024-22407-Broken Access Control order API in Shopware

View chart →

shopware/shopware · GHSA-3867-jc5c-66qf