Security Advisories | GitStock

high2023-10-28

CVE-2023-46215-Apache Airflow Celery provider Insertion of Sensitive Information into Log File vulnerability

apache/airflow · GHSA-666g-rfc5-c9jv

high2023-10-28

CVE-2023-46468-juzawebCMS Injection vulnerability

juzaweb/cms · GHSA-h92m-4g9m-72vr

low2023-10-28

CVE-2023-5834-HashiCorp Vagrant Insecure Operation on Windows Junction / Mount Point vulnerability

hashicorp/vagrant · GHSA-47xw-vw6m-w9fq

high2023-10-27

DoS vulnerabilities persist in ESAPI file uploads despite remediation of CVE-2023-24998

esapi/esapi-java-legacy · GHSA-7c2q-5qmr-v76q

low2023-10-27

CVE-2023-41891-Flyte Admin SQL Injection in List Filters

flyteorg/flyteadmin · GHSA-r847-6w6h-r8g4

critical2023-10-27

CVE-2023-46604-Apache ActiveMQ is vulnerable to Remote Code Execution

apache/activemq · GHSA-crg9-44h2-xw35

high2023-10-26

Cosmos packet-forward-middleware vulnerable to chain-halt

cosmos/ibc-apps · GHSA-w6rp-vxj2-fjhr

medium2023-10-26

CVE-2023-41893-Home Assistant vulnerable to account takeover via auth_callback login

home-assistant/core · GHSA-qhhj-7hrc-gqj5

high2023-10-26

CVE-2023-46234-browserify-sign upper bound check issue in `dsaVerify` leads to a signature forgery attack

browserify/browserify-sign · GHSA-x9w5-v3q2-3rhw

medium2023-10-26

CVE-2023-43792-baserCMS Code Injection Vulnerability in Mail Form Feature

baserproject/basercms · GHSA-vrm6-c878-fpq6

medium2023-10-26

CVE-2023-43649-baserCMS CSRF vulnerability in Content preview Feature

baserproject/basercms · GHSA-fw9x-cqjq-7jx5

medium2023-10-26

CVE-2023-43648-baserCMS Directory Traversal vulnerability in Form submission data management Feature

baserproject/basercms · GHSA-hmqj-gv2m-hq55

medium2023-10-26

CVE-2023-43647-baserCMS Cross-site Scripting vulnerability in File upload Feature

baserproject/basercms · GHSA-ggj4-78rm-6xgv

medium2023-10-26

CVE-2023-29009-baserCMS Cross-site Scripting Vulnerability in Favorites Feature

baserproject/basercms · GHSA-8vqx-prq4-rqrq

high2023-10-25

CVE-2023-5044-Ingress-nginx code injection via nginx.ingress.kubernetes.io/permanent-redirect annotation

kubernetes/ingress-nginx · GHSA-fp9f-44c2-cw27

high2023-10-25

CVE-2022-4886-Ingress-nginx path sanitization can be bypassed

kubernetes/ingress-nginx · GHSA-gvrm-w2f9-f77q

high2023-10-25

gRPC-Go HTTP/2 Rapid Reset vulnerability

grpc/grpc-go · GHSA-m425-mq94-257g

critical2023-10-25

CVE-2023-46233-crypto-js PBKDF2 1,000 times weaker than specified in 1993 and 1.3M times weaker than current standard

brix/crypto-js · GHSA-xwcq-pm8m-c4vf

medium2023-10-25

CVE-2023-46137-twisted.web has disordered HTTP pipeline response

twisted/twisted · GHSA-xc8x-vp79-p3wm

critical2023-10-25

CVE-2023-46133-crypto-es PBKDF2 1,000 times weaker than specified in 1993 and 1.3M times weaker than current standard

entronad/crypto-es · GHSA-mpj8-q39x-wq5h