Security advisories

high2023-11-14

CVE-2023-5072-Java: DoS Vulnerability in JSON-JAVA

View chart →

stleary/json-java · GHSA-4jq9-2xhw-jpx7

high2023-11-14

CVE-2023-47631-vantage6-server node accepts non-whitelisted algorithms from malicious server

View chart →

vantage6/vantage6 · GHSA-vc3v-ppc7-v486

medium2023-11-14

CVE-2023-47627-AIOHTTP has problems in HTTP parser (the python one, not llhttp)

View chart →

aio-libs/aiohttp · GHSA-gfw2-4jvh-wgfg

high2023-11-14

CVE-2023-47630-Attacker can cause Kyverno user to unintentionally consume insecure image

View chart →

kyverno/kyverno · GHSA-3hfq-cx9j-923w

high2023-11-14

CVE-2023-47130-yiisoft/yii deserializing untrusted user input can lead to remote code execution

View chart →

yiisoft/yii · GHSA-mw2w-2hj2-fg8q

high2023-11-14

CVE-2023-5528-Kubernetes Improper Input Validation vulnerability

View chart →

kubernetes/kubernetes · GHSA-hq6q-c2x6-hmch

medium2023-11-14

CVE-2023-5976-Microweber Improper Access Control vulnerability

View chart →

microweber/microweber · GHSA-q57g-38pc-jwv8

medium2023-11-14

CVE-2019-25155-DOMPurify Open Redirect vulnerability

View chart →

cure53/dompurify · GHSA-8hgg-xxm5-3873

high2023-11-14

CVE-2023-36049-Microsoft Security Advisory CVE-2023-36049: .NET Elevation of Privilege Vulnerability

View chart →

dotnet/runtime · GHSA-c3hf-8vgx-72rh

medium2023-11-14

CVE-2023-36558-Microsoft Security Advisory CVE-2023-36558: .NET Security Feature Bypass Vulnerability

View chart →

dotnet/runtime · GHSA-3fx3-85r4-8j3w

low2023-11-14

CVE-2023-47641-Aiohttp has inconsistent interpretation of `Content-Length` vs. `Transfer-Encoding` differing in C and Python fallbacks

View chart →

aio-libs/aiohttp · GHSA-xx9p-xxvh-7g8j

low2023-11-14

CVE-2023-47126-Information Disclosure in typo3/cms-install tool

View chart →

typo3/typo3 · GHSA-p2jh-95jg-2w55

medium2023-11-14

CVE-2023-47125-Bypassing Cross-Site Scripting Protection in TYPO3 HTML Sanitizer

View chart →

typo3/html-sanitizer · GHSA-mm79-jhqm-9j54

medium2023-11-14

CVE-2023-47122-Gitsign's Rekor public keys fetched from upstream API instead of local TUF client.

View chart →

sigstore/gitsign · GHSA-xvrc-2wvh-49vc

high2023-11-14

CVE-2023-46132-Fabric vulnerable to crosslinking transaction attack

View chart →

hyperledger/fabric · GHSA-v9w2-543f-h69m

high2023-11-14

CVE-2023-47621-Guest Entries Remote code execution via file uploads

View chart →

duncanmcclean/guest-entries · GHSA-rw82-mhmx-grmj

high2023-11-14

Insufficient covariance check makes self_cell unsound

View chart →

voultapher/self_cell · GHSA-48m6-wm5p-rr6h

medium2023-11-14

CVE-2023-46998-Bootbox.js Cross Site Scripting vulnerability

View chart →

bootboxjs/bootbox · GHSA-m4ch-4m5f-2gp6

medium2023-11-14

CVE-2023-47127-TYPO3 vulnerable to Weak Authentication in Session Handling

View chart →

typo3/typo3 · GHSA-3vmm-7h4j-69rm

high2023-11-14

CVE-2023-47117-Label Studio Object Relational Mapper Leak Vulnerability in Filtering Task

View chart →

humansignal/label-studio · GHSA-6hjj-gq77-j4qw