Security advisories

low2023-10-25

CVE-2023-46658-Jenkins MSTeams Webhook Trigger Plugin uses non-constant time webhook token comparison

View chart →

jenkinsci/teams-webhook-trigger-plugin · GHSA-2xpq-5952-38w3

high2023-10-25

CVE-2023-43961-SaToken authentication bypass vulnerability

View chart →

dromara/sa-token · GHSA-w9vh-hv5g-7wmr

medium2023-10-25

CVE-2023-44769-Zenario CMS Cross-site Scripting vulnerability

View chart →

tribalsystems/zenario · GHSA-8g87-73vq-443p

critical2023-10-25

CVE-2023-44794-SaToken privilege escalation vulnerability

View chart →

dromara/sa-token · GHSA-54f6-9mx9-86f7

high2023-10-25

CVE-2023-39619-Inefficient Regular Expression Complexity in node-email-check

View chart →

teomantuncer/node-email-check · GHSA-9242-6p36-6256

medium2023-10-25

CVE-2023-31580-light-oauth2 missing public key verification

View chart →

networknt/light-oauth2 · GHSA-mx47-h5fv-ghwh

critical2023-10-25

CVE-2023-31581-Sureness uses hardcoded key

View chart →

dromara/sureness · GHSA-3j2f-58rq-g6p7

medium2023-10-25

CVE-2023-46136-Werkzeug DoS: High resource usage when parsing multipart/form-data containing a large part with CR/LF character at the beginning

View chart →

pallets/werkzeug · GHSA-hrfv-mqp8-q5rw

medium2023-10-25

CVE-2023-46134-dtale vulnerable to Remote Code Execution through the Custom Filter Input

View chart →

man-group/dtale · GHSA-jq6c-r9xf-qxjm

medium2023-10-25

CVE-2023-46135-stellar-strkey vulnerable to panic in SignedPayload::from_payload

View chart →

stellar/rs-stellar-strkey · GHSA-5873-6fwq-463f

medium2023-10-24

CVE-2023-43651-Jumpserver Koko vulnerable to remote code execution on the host system via MongoDB shell

View chart →

jumpserver/koko · GHSA-4r5x-x283-wm96

high2023-10-24

CVE-2023-46128-Nautobot vulnerable to exposure of hashed user passwords via REST API

View chart →

nautobot/nautobot · GHSA-r2hw-74xv-4gqp

medium2023-10-24

CVE-2024-21530-Sequential calls of encryption API (`encrypt`, `wrap`, and `dump`) result in nonce reuse

View chart →

fadeevab/cocoon · GHSA-6878-6wc2-pf5h

high2023-10-24

CVE-2023-43795-WPS Server Side Request Forgery vulnerability

View chart →

geoserver/geoserver · GHSA-5pr3-m5hm-9956

medium2023-10-24

CVE-2023-41339-Unsecured WMS dynamic styling sld=<url> parameter affords blind unauthenticated SSRF

View chart →

geoserver/geoserver · GHSA-cqpc-x2c6-2gmf

low2023-10-24

CVE-2023-46126-Fides JavaScript Injection Vulnerability in Privacy Center URL

View chart →

ethyca/fides · GHSA-fgjj-5jmr-gh83

medium2023-10-24

CVE-2023-46125-Fides Information Disclosure Vulnerability in Config API Endpoint

View chart →

ethyca/fides · GHSA-rjxg-rpg3-9r89

high2023-10-24

CVE-2023-46124-Fides Server-Side Request Forgery Vulnerability in Custom Integration Upload

View chart →

ethyca/fides · GHSA-jq3w-9mgf-43m4

high2023-10-24

CVE-2024-0241-encoded_id-rails potential DOS vulnerability due to URIs with extremely long encoded IDs

View chart →

stevegeek/encoded_id-rails · GHSA-3px7-jm2p-6h2c

low2023-10-24

CVE-2023-46122-sbt vulnerable to arbitrary file write via archive extraction (Zip Slip)

View chart →

sbt/sbt · GHSA-h9mw-grgx-2fhf