Security advisories

medium2023-12-07

CVE-2023-6568-Cross-site Scripting (XSS) in MLflow

View chart →

mlflow/mlflow · GHSA-vwhf-3v6x-wff8

medium2023-12-07

CVE-2023-6566-Microweber Business Logic Errors

View chart →

microweber/microweber · GHSA-3rpx-pgmf-j96h

low2023-12-06

eventing-github vulnerable to denial of service caused by improper enforcement of the timeout on individual read operations

View chart →

knative-extensions/eventing-github · GHSA-v7hc-87jc-qrrr

medium2023-12-06

CVE-2023-6393-Quarkus Cache Runtime exposes sensitive information to an unauthorized actor

View chart →

quarkusio/quarkus · GHSA-xfv5-jqgp-vqhj

high2023-12-06

CVE-2023-6458-Mattermost Injection vulnerability

View chart →

mattermost/mattermost · GHSA-7664-hcp7-f497

medium2023-12-06

CVE-2023-6459-Mattermost Exposure of Sensitive Information to an Unauthorized Actor vulnerability

View chart →

mattermost/mattermost · GHSA-63cv-4pc2-4fcf

medium2023-12-06

CVE-2023-26154-pubnub Insufficient Entropy vulnerability

View chart →

pubnub/javascript · GHSA-5844-q3fc-56rh

low2023-12-05

CVE-2023-49297-PyDrive2's unsafe YAML deserialization in LoadSettingsFile allows arbitrary code execution

View chart →

iterative/pydrive2 · GHSA-v5f6-hjmf-9mc5

medium2023-12-05

CVE-2023-6180-tokio-boring vulnerable to resource exhaustion via memory leak

View chart →

cloudflare/boring · GHSA-pjrj-h4fg-6gm4

low2023-12-05

Canonical LXD documentation improvement to make clear restricted.devices.disk=allow without restricted.devices.disk.paths also allows shift=true

View chart →

canonical/lxd · GHSA-x9qq-236j-gj97

medium2023-12-05

CVE-2023-49293-Vite XSS vulnerability in `server.transformIndexHtml` via URL payload

View chart →

vitejs/vite · GHSA-92r3-m2mg-pj97

high2023-12-05

CVE-2023-49292-github.com/ecies/go vulnerable to possible private key restoration

View chart →

ecies/go · GHSA-8j98-cjfr-qx3h

critical2023-12-05

CVE-2023-49291-tj-actions/branch-names's Improper Sanitization of Branch Name Leads to Arbitrary Code Injection

View chart →

tj-actions/branch-names · GHSA-8v8w-v8xg-79rf

medium2023-12-05

CVE-2023-49290-lestrrat-go/jwx's malicious parameters in JWE can cause a DOS

View chart →

lestrrat-go/jwx · GHSA-7f9x-gw85-8grf

medium2023-12-05

Test code in published microsoft-graph-beta package exposes phpinfo()

View chart →

microsoftgraph/msgraph-beta-sdk-php · GHSA-7mc6-x925-7qvx

medium2023-12-05

CVE-2023-49283-Test code in published microsoft-graph-core package exposes phpinfo()

View chart →

microsoftgraph/msgraph-sdk-php-core · GHSA-mhhp-c3cm-2r86

medium2023-12-05

CVE-2023-49282-Test code in published microsoft-graph package exposes phpinfo()

View chart →

microsoftgraph/msgraph-sdk-php · GHSA-cgwq-6prq-8h9q

high2023-12-05

CVE-2023-49280-Data leak of password hash through change requests

View chart →

xwiki-contrib/application-changerequest · GHSA-2fr7-cc7p-p45q

medium2023-12-05

CVE-2023-46674-Elasticsearch-hadoop Unsafe Deserialization

View chart →

elastic/elasticsearch-hadoop · GHSA-rv74-m283-5j95

medium2023-12-05

CVE-2023-49080-jupyter-server errors include tracebacks with path information

View chart →

jupyter-server/jupyter_server · GHSA-h56g-gq9v-vc8r