Security advisories

low2023-12-08

eventing-gitlab vulnerable to denial of service, caused by improper enforcement of the timeout on individual read operations

View chart →

knative-extensions/eventing-gitlab · GHSA-99jv-8292-2hpm

high2023-12-08

CVE-2023-46496-Directory Traversal in evershop

View chart →

evershopcommerce/evershop · GHSA-rwf3-w4jq-f4cm

medium2023-12-08

CVE-2023-46494-Cross Site Scripting in evershop

View chart →

evershopcommerce/evershop · GHSA-m6vm-ff9v-jp3r

medium2023-12-08

CVE-2023-46499-Cross-site Scripting in evershop

View chart →

evershopcommerce/evershop · GHSA-gjj8-m83c-qv9h

medium2023-12-08

CVE-2023-46497-Directory Traversal in evershop

View chart →

evershopcommerce/evershop · GHSA-7443-5962-wp4r

critical2023-12-08

CVE-2023-46498-Code execution in evershop

View chart →

evershopcommerce/evershop · GHSA-5mmr-9qx3-3pf9

medium2023-12-08

CVE-2023-46493-Directory Traversal in evershop

View chart →

evershopcommerce/evershop · GHSA-4wrm-qmq2-5fjx

medium2023-12-08

CVE-2023-46495-Cross-site Scripting in evershop

View chart →

evershopcommerce/evershop · GHSA-2xcj-557c-hf8r

low2023-12-08

dbt-core's secret env vars written to package-lock.json in plaintext

View chart →

dbt-labs/dbt-core · GHSA-j4g3-3q8x-jxqp

medium2023-12-08

CVE-2023-49487-Cross-site Scripting in JFinalCMS

View chart →

jfinal/jfinal · GHSA-m42v-qv3c-h6j7

medium2023-12-08

CVE-2023-49486-Cross-site Scripting in JFinalCMS

View chart →

jfinal/jfinal · GHSA-hjfp-2j7q-xmx4

medium2023-12-08

CVE-2023-49485-Cross-site Scripting in JFinalCMS

View chart →

jfinal/jfinal · GHSA-f2w8-4m48-5qrq

high2023-12-08

CVE-2023-6245-Candid infinite decoding loop through specially crafted payload

View chart →

dfinity/candid · GHSA-7787-p7x6-fq3j

high2023-12-08

Magento LTS vulnerable to Stored XSS via TinyMCE WYSIWYG Editor

View chart →

openmage/magento-lts · GHSA-9j5w-2cqc-cwj9

medium2023-12-08

CVE-2023-48311-DockerSpawner allows any image by default

View chart →

jupyterhub/dockerspawner · GHSA-hfgr-h3vc-p6c2

high2023-12-08

CVE-2023-26158-mockjs vulnerable to Prototype Pollution via the Util.extend function

View chart →

nuysoft/mock · GHSA-mh8j-9jvh-gjf6

high2023-12-08

CVE-2023-48122-Microweber allows a remote attacker to obtain sensitive information via the HTTP GET method

View chart →

microweber/microweber · GHSA-p8q6-qrgj-7gx2

low2023-12-08

CVE-2023-6599-Microweber missing standardized error handling mechanism

View chart →

microweber/microweber · GHSA-9r6p-hg4g-5gxp

medium2023-12-07

CVE-2023-47440-Directory Traversal in Gladys Assistant

View chart →

gladysassistant/gladys · GHSA-c79f-pqgf-fhp3

critical2023-12-07

CVE-2023-50164-Apache Struts vulnerable to path traversal

View chart →

apache/struts · GHSA-2j39-qcjm-428w