Security Advisories

high2023-11-13

CVE-2023-47163-Remarshal expands YAML alias nodes unlimitedly, hence Remarshal is vulnerable to Billion Laughs Attack

View chart

remarshal-project/remarshal · GHSA-gw7g-qr8w-3448

high2023-11-12

CVE-2023-47129-Statamic CMS remote code execution via front-end form uploads

View chart

statamic/cms · GHSA-72hg-5wr5-rmfc

critical2023-11-12

CVE-2023-47128-piccolo SQL Injection via named transaction savepoints

View chart

piccolo-orm/piccolo · GHSA-xq59-7jf3-rjc6

low2023-11-12

gnark's range checker gadget allows wider inputs up to word alignment

View chart

consensys/gnark · GHSA-rjjm-x32p-m3f7

high2023-11-12

CVE-2023-47108-otelgrpc DoS vulnerability due to unbound cardinality metrics

View chart

open-telemetry/opentelemetry-go-contrib · GHSA-8pgv-569h-w5rw

medium2023-11-12

CVE-2023-46735-Symfony potential Cross-site Scripting in WebhookController

View chart

symfony/symfony · GHSA-72x2-5c85-6wmr

medium2023-11-12

CVE-2023-46734-Symfony potential Cross-site Scripting vulnerabilities in CodeExtension filters

View chart

symfony/symfony · GHSA-q847-2q57-wmr3

medium2023-11-12

CVE-2023-46733-Symfony possible session fixation vulnerability

View chart

symfony/symfony · GHSA-m2wj-r6g3-fxfx

high2023-11-12

CVE-2023-42781-Apache Airflow vulnerable to Exposure of Sensitive Information to an Unauthorized Actor

View chart

apache/airflow · GHSA-r7x6-xfcm-3mxv

medium2023-11-12

CVE-2023-47037-Apache Airflow allows authenticated and DAG-view authorized users to modify some DAG run detail values when submitting notes

View chart

apache/airflow · GHSA-hm9r-7f84-25c9

high2023-11-11

CVE-2023-47390-Headscale writes bearer tokens to info-level logs

View chart

juanfont/headscale · GHSA-wp76-cf2j-rqq7

critical2023-11-10

CVE-2023-6069-Froxlor Improper Input Validation vulnerability

View chart

froxlor/froxlor · GHSA-4jch-8qq5-hqg6

medium2023-11-09

CVE-2023-46729-Sentry Next.js vulnerable to SSRF via Next.js SDK tunnel endpoint

View chart

getsentry/sentry-javascript · GHSA-2rmr-xw8m-22q9

low2023-11-09

CVE-2023-5551-Moodle Exposure of Sensitive Information to an Unauthorized Actor vulnerability

View chart

moodle/moodle · GHSA-jr83-8x65-xcr5

medium2023-11-09

CVE-2023-5544-Moodle Cross-site Scripting vulnerability

View chart

moodle/moodle · GHSA-j5xf-gv89-g422

medium2023-11-09

CVE-2023-5549-Moodle Improper Access Control vulnerability

View chart

moodle/moodle · GHSA-fm5h-58g2-4m3f

medium2023-11-09

CVE-2023-5548-Moodle Acceptance of Extraneous Untrusted Data With Trusted Data vulnerability

View chart

moodle/moodle · GHSA-cwh2-q44x-5w3c

medium2023-11-09

CVE-2023-5547-Moodle Cross-site Scripting vulnerability

View chart

moodle/moodle · GHSA-9gqp-3g28-w9xc

medium2023-11-09

CVE-2023-5550-Moodle Code Injection vulnerability

View chart

moodle/moodle · GHSA-5cvx-cwpx-9rjh

high2023-11-09

CVE-2023-5954-HashiCorp Vault Missing Release of Memory after Effective Lifetime vulnerability

View chart

hashicorp/vault · GHSA-4qhc-v8r6-8vwm