Security advisories

medium2023-12-12

CVE-2023-49922-Elastic Beats inserts sensitive information into log file

View chart →

elastic/beats · GHSA-hj4r-2c9c-29h3

critical2023-12-12

CVE-2023-50245-memory overflow vulnerability in OpenEXR-viewer

View chart →

afichet/openexr-viewer · GHSA-99jg-r3f4-rpxj

high2023-12-12

CVE-2023-6709-Jinja2 template injection in mlflow

View chart →

mlflow/mlflow · GHSA-cxfr-5q3r-2rc2

medium2023-12-12

CVE-2023-49804-Password Change Vulnerability

View chart →

louislam/uptime-kuma · GHSA-88j4-pcx8-q4q3

high2023-12-12

lakeFS logs S3 credentials in plain text

View chart →

treeverse/lakefs · GHSA-4rgc-5g6r-2rjf

medium2023-12-12

User with permission to write actions can impersonate another user when auth token is configured in environment variable

View chart →

treeverse/lakefs · GHSA-26hr-q2wp-rvc5

high2023-12-12

CVE-2023-49799-SSRF & Credentials Leak

View chart →

johannschopplich/nuxt-api-party · GHSA-3wfp-253j-5jxv

medium2023-12-12

CVE-2023-49798-OpenZeppelin Contracts and Contracts Upgradeable duplicated execution of subcalls in v4.9.4

View chart →

openzeppelin/openzeppelin-contracts · GHSA-699g-q6qh-q4v8

medium2023-12-12

CVE-2023-49796-Improper Input Validation in mindsdb

View chart →

mindsdb/mindsdb · GHSA-crhp-7c74-cg4c

medium2023-12-12

CVE-2023-49795-Server-Side Request Forgery in mindsdb

View chart →

mindsdb/mindsdb · GHSA-34mr-6q8x-g9r6

medium2023-12-12

CVE-2023-45292-Always incorrect control flow in github.com/mojocn/base64Captcha

View chart →

mojocn/base64captcha · GHSA-5mmw-p5qv-w3x5

low2023-12-11

Stale copy of the public suffix list

View chart →

gsemac/gsemac.common · GHSA-w4x6-hh3x-wjrx

high2023-12-11

CVE-2023-49803-Overly permissive origin policy

View chart →

koajs/cors · GHSA-qxrj-hx23-xp82

high2023-12-11

CVE-2023-49800-DOS by abusing `fetchOptions.retry`.

View chart →

johannschopplich/nuxt-api-party · GHSA-q6hx-3m4p-749h

medium2023-12-10

CVE-2022-48614-Cross-site Scripting in Semantic MediaWiki

View chart →

semanticmediawiki/semanticmediawiki · GHSA-hj4c-vfc4-5f9c

high2023-12-10

CVE-2023-50449-Directory Traversal in JFinalCMS

View chart →

jfinal/jfinal · GHSA-7x2g-4jvc-4x6p

medium2023-12-10

CVE-2023-6654-PHPEMS Deserialization of Untrusted Data vulnerability

View chart →

oiuv/phpems · GHSA-5rv2-vvmf-f7w8

high2023-12-09

CVE-2023-6394-Authorization bypass in Quarkus

View chart →

quarkusio/quarkus · GHSA-mvc8-6ffp-jrx5

high2023-12-09

CVE-2023-49797-Local Privilege Escalation in Windows

View chart →

pyinstaller/pyinstaller · GHSA-9w2p-rh8c-v9g5

high2023-12-09

CVE-2023-6337-Memory exhaustion in HashiCorp Vault

View chart →

hashicorp/vault · GHSA-6p62-6cg9-f5f5