Security advisories

high2023-12-20

CVE-2023-7018-transformers has a Deserialization of Untrusted Data vulnerability

View chart →

huggingface/transformers · GHSA-v68g-wm8c-6x7j

high2023-12-20

CVE-2023-38519-MainWP Dashboard SQL Command Injection vulnerability

View chart →

mainwp/mainwp · GHSA-87fg-9x5w-j3rm

high2023-12-20

CVE-2023-37544-Apache Pulsar WebSocket Proxy contains an Improper Authentication vulnerability

View chart →

apache/pulsar · GHSA-83q5-whqp-r8jr

high2023-12-20

CVE-2023-6976-MLflow Path Traversal Vulnerability

View chart →

mlflow/mlflow · GHSA-wv8q-4f85-2p8p

high2023-12-20

CVE-2023-6977-MLflow Local File Disclosure Vulnerability

View chart →

mlflow/mlflow · GHSA-qg8p-32gr-gh6x

critical2023-12-20

CVE-2023-6975-MLFlow Path Traversal Vulnerability

View chart →

mlflow/mlflow · GHSA-hh8p-p8mp-gqhm

high2023-12-20

CVE-2023-6909-MLflow Path Traversal Vulnerability

View chart →

mlflow/mlflow · GHSA-5r3q-93q3-f978

critical2023-12-20

CVE-2023-6974-MLflow Server-Side Request Forgery (SSRF)

View chart →

mlflow/mlflow · GHSA-59v3-898r-qwhj

high2023-12-19

CVE-2023-51442-Authentication bypass vulnerability in navidrome's subsonic endpoint

View chart →

navidrome/navidrome · GHSA-wq59-4q6r-635r

high2023-12-19

Expired tokens can be renewed without validating the account password

View chart →

simonrob/email-oauth2-proxy · GHSA-9wgg-m99q-hhfc

high2023-12-19

CVE-2023-50732-Velocity execution without script right through tree macro

View chart →

xwiki/xwiki-platform · GHSA-p5f8-qf24-24cj

medium2023-12-19

containerd allows RAPL to be accessible to a container

View chart →

containerd/containerd · GHSA-7ww5-4wqc-m92c

critical2023-12-19

CVE-2023-6730-transformers has a Deserialization of Untrusted Data vulnerability

View chart →

huggingface/transformers · GHSA-3863-2447-669p

critical2023-12-19

CVE-2019-25158-Pedroetb TTS-API OS Command Injection

View chart →

pedroetb/tts-api · GHSA-jx6q-fq9h-6g7q

medium2023-12-19

CVE-2023-49736-Apache Superset SQL injection vulnerability

View chart →

apache/superset · GHSA-jfxj-xf67-x723

high2023-12-19

CVE-2023-49734-Apache Superset incorrect write permissions vulnerability

View chart →

apache/superset · GHSA-g49j-j489-3xpf

medium2023-12-19

CVE-2023-46104-Apache Superset uncontrolled resource consumption

View chart →

apache/superset · GHSA-95mg-jgfx-54v9

medium2023-12-19

CVE-2023-49006-Phpsysinfo Cross Site Request Forgery (CSRF) vulnerability

View chart →

phpsysinfo/phpsysinfo · GHSA-67gv-xrw7-p72w

high2023-12-19

CVE-2023-6940-mlflow Command Injection vulnerability

View chart →

mlflow/mlflow · GHSA-hvc6-42vf-jhf8

medium2023-12-19

CVE-2014-125107-Corveda PHPSandbox Protection Mechanism Failure vulnerability

View chart →

corveda/phpsandbox · GHSA-625p-jwcp-r2r5