Security Advisories | GitStock

critical2023-12-15

CVE-2023-49898-Apache StreamPark: Authenticated system users could trigger remote command execution

apache/incubator-streampark · GHSA-qg44-xqwj-wc28

medium2023-12-15

CVE-2023-6835-WSO2 API Manager allows attackers to change the API rating

wso2/carbon-apimgt · GHSA-w7rx-824v-rgx5

critical2023-12-15

CVE-2023-46279-Apache Dubbo: Bypass deny serialize list check in Apache Dubbo

apache/dubbo · GHSA-97rv-88gf-phvr

critical2023-12-15

CVE-2023-29234-Bypass serialize checks in Apache Dubbo

apache/dubbo · GHSA-6x49-w35h-wqrj

high2023-12-15

CVE-2023-50731-GitHub Security Lab (GHSL) Vulnerability Report: Arbitary write GHSL-2023-182

mindsdb/mindsdb · GHSA-j8w6-2r9h-cxhj

low2023-12-15

Ref methods into_ref, into_mut, into_slice, and into_slice_mut are unsound when used with cell::Ref or cell::RefMut

google/zerocopy · GHSA-3mv5-343c-w2qg

high2023-12-15

CVE-2023-54366-SurrealDB: Full Table Permissions by Default

surrealdb/surrealdb · GHSA-x5fr-7hhj-34j3

medium2023-12-15

CVE-2023-6832-Business Logic Errors in microweber/microweber

microweber/microweber · GHSA-qjfx-fvx7-3wvw

critical2023-12-15

CVE-2023-6831-Path traversal in MLflow

mlflow/mlflow · GHSA-554w-xh4j-8w64

critical2023-12-15

Cross-site Scripting in @spscommerce/ds-react

spscommerce/woodland · GHSA-cfxh-frx4-9gjg

medium2023-12-15

CVE-2023-50710-Named path parameters can be overridden in TrieRouter

honojs/hono · GHSA-f6gv-hh8j-q8vq

high2023-12-14

CVE-2023-6563-Allocation of Resources Without Limits in Keycloak

keycloak/keycloak · GHSA-54f3-c6hg-865h

medium2023-12-14

CVE-2023-50137-Cross-site Scripting in JFinalcms

jfinal/jfinal · GHSA-xv7p-jw46-8r85

medium2023-12-14

CVE-2023-50102-Cross-site Scripting in JFinalcms

jfinal/jfinal · GHSA-p3ph-6245-4wfc

medium2023-12-14

CVE-2023-50101-Cross-site Scripting in JFinalcms

jfinal/jfinal · GHSA-m3p6-43xj-pf9v

critical2023-12-14

CVE-2023-6572-Gradio Exposure of Sensitive Information to an Unauthorized Actor vulnerability

gradio-app/gradio · GHSA-gqvf-3hgp-5hxv

critical2023-12-14

CVE-2023-6569-External Control of File Name or Path in h2oai/h2o-3

h2oai/h2o-3 · GHSA-gqrq-j6pm-98c2

medium2023-12-14

CVE-2023-46750-Open redirect in Apache Shiro

apache/shiro · GHSA-hhw5-c326-822h

medium2023-12-13

CVE-2023-50709-Cube API denial of service attack

cube-js/cube · GHSA-9759-3276-g2pm

high2023-12-13

CVE-2023-50461-Configuration Injection in extension "Direct Mail" (direct_mail)

kartolo/direct_mail · GHSA-p6xx-fhfw-7mj7