Security Advisories | GitStock

critical2023-11-22

CVE-2023-37924-SQL injection in Apache Submarine

apache/submarine · GHSA-v5gj-fx3g-hcpw

medium2023-11-22

CVE-2023-46673-Elasticsearch Improper Handling of Exceptional Conditions

elastic/elasticsearch · GHSA-285m-vhfq-xx4h

low2023-11-22

CVE-2021-22143-Exposure of Sensitive Information in Elastic APM .NET Agent

elastic/apm-agent-dotnet · GHSA-hx93-gc73-5rpr

high2023-11-22

CVE-2021-37942-APM Java Agent Local Privilege Escalation issue

elastic/apm-agent-java · GHSA-5xqm-hc45-f2g2

medium2023-11-21

CVE-2023-48700-Clear Text Credentials Exposed via Onboarding Task

nautobot/nautobot-plugin-device-onboarding · GHSA-qf3c-rw9f-jh7v

high2023-11-21

CVE-2023-47890-Download to arbitrary folder can lead to RCE

pyload/pyload · GHSA-h73m-pcfw-25h2

high2023-11-21

CVE-2023-48699-Eval Injection in fastbots

ubertidavide/fastbots · GHSA-vccg-f4gp-45x9

medium2023-11-21

Decryption of malicious PBES2 JWE objects can consume unbounded system resources

go-jose/go-jose · GHSA-2c7c-3mj9-8fqh

medium2023-11-21

CVE-2023-48299-TorchServe ZipSlip

pytorch/serve · GHSA-m2mj-pr4f-h9jp

high2023-11-21

CVE-2023-48051-upydev has weak encryption padding

carglglz/upydev · GHSA-qc4j-hrj6-cppf

medium2023-11-20

CVE-2023-48309-Possible user mocking that bypasses basic authentication

nextauthjs/next-auth · GHSA-v64w-49xw-qq89

medium2023-11-20

CVE-2023-48218-Bypass of field access control in strapi-plugin-protected-populate

strapi-community/strapi-plugin-protected-populate · GHSA-6h67-934r-82g7

high2023-11-20

CVE-2023-48293-Cross-Site Request Forgery with QueryOnXWiki allows arbitrary database queries

xwiki-contrib/application-admintools · GHSA-4f4c-rhjv-4wgv

critical2023-11-20

CVE-2023-48292-Run Shell Command allows Cross-Site Request Forgery

xwiki-contrib/application-admintools · GHSA-8jpr-ff92-hpf9

high2023-11-20

CVE-2023-48241-Whole content of all documents of all wikis exposed to anybody with view right on Solr suggest service

xwiki/xwiki-platform · GHSA-7fqr-97j7-jgf4

critical2023-11-20

CVE-2023-48240-Cookies are sent to external images in rendered diff (and server side request forgery)

xwiki/xwiki-platform · GHSA-7rfg-6273-f5wp

medium2023-11-20

CVE-2023-48223-JWT Algorithm Confusion

nearform/fast-jwt · GHSA-c2ff-88x2-x9pg

critical2023-11-20

CVE-2022-46337-Apache Derby: LDAP injection vulnerability in authenticator

apache/derby · GHSA-rcjc-c4pj-xxrp

medium2023-11-18

CVE-2023-40813-Cross-site Scripting in OpenCRX

opencrx/opencrx · GHSA-5phw-6g3r-55xx

high2023-11-18

CVE-2023-46402-Inefficient Regular Expression Complexity in git-urls

whilp/git-urls · GHSA-3f2q-6294-fmq5