Security advisories

medium2023-12-22

CVE-2023-51662-Snowflake Connector .NET does not properly check the Certificate Revocation List (CRL)

View chart →

snowflakedb/snowflake-connector-net · GHSA-hwcc-4cv8-cf3h

medium2023-12-22

CVE-2023-6911-WSO2 Registry Stored Cross Site Scripting (XSS) vulnerability

View chart →

wso2/carbon-registry · GHSA-rfq3-wpjh-ppvg

high2023-12-22

CVE-2023-49391-free5GC AMF denial of service vulnerability

View chart →

free5gc/amf · GHSA-jcrr-rr6w-8c83

high2023-12-22

CVE-2023-43741-Buildkite Elastic CI for AWS time-of-check-time-of-use race condition vulnerability

View chart →

buildkite/elastic-ci-stack-for-aws · GHSA-r5hg-349q-mg2q

high2023-12-22

CVE-2023-43116-Buildkite Elastic CI for AWS symbolic link following vulnerability

View chart →

buildkite/elastic-ci-stack-for-aws · GHSA-7c44-7j7v-w554

medium2023-12-21

CVE-2023-51651-Potential URI resolution path traversal in the AWS SDK for PHP

View chart →

aws/aws-sdk-php · GHSA-557v-xcg6-rm5m

medium2023-12-21

CVE-2023-53157-Remotely exploitable denial of service in Rosenpass

View chart →

rosenpass/rosenpass · GHSA-6ggr-cwv4-g7qg

low2023-12-21

CVE-2023-7037-Authenticated Blind SSRF in automad/automad

View chart →

marcantondahmen/automad · GHSA-q5q3-qm26-9jwm

medium2023-12-21

CVE-2023-7038-Cross-Site Request Forgery (CSRF) in automad/automad

View chart →

marcantondahmen/automad · GHSA-4j8w-p6hv-3qxc

high2023-12-21

CVE-2023-6291-The redirect_uri validation logic allows for bypassing explicitly allowed hosts that would otherwise be restricted

View chart →

keycloak/keycloak · GHSA-mpwq-j3xf-7m5w

high2023-12-21

CVE-2023-51449-Gradio makes the `/file` secure against file traversal and server-side request forgery attacks

View chart →

gradio-app/gradio · GHSA-6qm2-wpxq-7qh2

medium2023-12-21

unsafe-libyaml unaligned write of u64 on 32-bit and 16-bit platforms

View chart →

dtolnay/unsafe-libyaml · GHSA-r24f-hg58-vfrw

medium2023-12-21

CVE-2023-50481-blinksocks has weak encryption algorithms

View chart →

blinksocks/blinksocks · GHSA-pqj5-37xf-x5gc

critical2023-12-21

CVE-2023-51656-Apache IoTDB: Unsafe deserialize map in Sync Tool

View chart →

apache/iotdb · GHSA-f23h-52hj-99p6

critical2023-12-21

CVE-2023-50475-bsock uses weak hashing algorithms

View chart →

bcoin-org/bcoin · GHSA-jj93-39pf-7mcf

medium2023-12-21

CVE-2023-49920-Apache Airflow Cross-Site Request Forgery vulnerability

View chart →

apache/airflow · GHSA-6m9r-7wrx-xmr6

medium2023-12-21

CVE-2023-50783-Apache Airflow Improper Access Control vulnerability

View chart →

apache/airflow · GHSA-5938-79hg-xh3q

medium2023-12-21

CVE-2023-47265-Apache Airflow has a stored cross-site scripting vulnerability

View chart →

apache/airflow · GHSA-pxch-wr7m-rwxj

medium2023-12-21

CVE-2023-48291-Apache Airflow vulnerable to Exposure of Resource to Wrong Sphere

View chart →

apache/airflow · GHSA-8f57-wcmg-4jmh

medium2023-12-20

CVE-2023-46131-Grails data binding causes JVM crash and/or other denial of service

View chart →

grails/grails-core · GHSA-3pjv-r7w4-2cf5