Security advisories

medium2023-10-20

CVE-2023-45280-Yamcs Cross-site Scripting vulnerability

View chart →

yamcs/yamcs · GHSA-643f-hpcc-2gv8

medium2023-10-20

CVE-2023-43341-Evolution CMS Cross-site Scripting vulnerability

View chart →

evolution-cms/evolution · GHSA-5h47-9rm5-fx3f

medium2023-10-20

CVE-2023-45279-Yamcs Cross-site Scripting vulnerability

View chart →

yamcs/yamcs · GHSA-4cqv-q33x-wfxw

high2023-10-19

CVE-2023-45820-Directus crashes on invalid WebSocket message

View chart →

directus/directus · GHSA-hmgw-9jrg-hf2m

high2023-10-19

CVE-2023-45277-Yamcs Path Traversal vulnerability

View chart →

yamcs/yamcs · GHSA-w4m2-qmh3-2g8f

critical2023-10-19

CVE-2023-45278-Yamcs API Directory Traversal vulnerability

View chart →

yamcs/yamcs · GHSA-43fw-536j-w37j

medium2023-10-19

CVE-2023-45825-ydb-go-sdk token in custom credentials object can leak through logs

View chart →

ydb-platform/ydb-go-sdk · GHSA-q24m-6h38-5xj8

high2023-10-19

CVE-2023-45823-Artifact Hub arbitrary file read vulnerability

View chart →

artifacthub/hub · GHSA-hmq4-c2r4-5q8h

low2023-10-19

CVE-2023-45822-Artifact Hub allows unsafe rego built-in

View chart →

artifacthub/hub · GHSA-9pc8-m4vp-ggvf

medium2023-10-19

CVE-2023-45821-Artifact Hub has Incorrect Docker Hub registry check

View chart →

artifacthub/hub · GHSA-g6pq-x539-7w4j

medium2023-10-19

CVE-2023-45819-TinyMCE XSS vulnerability in notificationManager.open API

View chart →

tinymce/tinymce · GHSA-hgqx-r2hp-jr38

medium2023-10-19

CVE-2023-45818-TinyMCE mXSS vulnerability in undo/redo, getContent API, resetContent API, and Autosave plugin

View chart →

tinymce/tinymce · GHSA-v65r-p3vv-jjfv

high2023-10-19

CVE-2023-45815-Viewing wget extractor output while logged in as an admin allows archived JS to execute in the admins context

View chart →

archivebox/archivebox · GHSA-cr45-98w9-gwqx

high2023-10-19

CVE-2023-47090-NATS.io: Adding accounts for just the system account adds auth bypass

View chart →

nats-io/nats-server · GHSA-fr2g-9hjm-wr23

medium2023-10-19

CVE-2023-45814-Bunkum tokens cached in the AuthenticationService are susceptible to a use-after-free

View chart →

littlebigrefresh/bunkum · GHSA-jrf2-h5j6-3rrq

high2023-10-19

CVE-2023-45812-Apollo Router vulnerable to Improper Check or Handling of Exceptional Conditions

View chart →

apollographql/router · GHSA-r344-xw3p-2frj

low2023-10-19

CVE-2023-45809-Wagtail vulnerable to disclosure of user names via admin bulk action views

View chart →

wagtail/wagtail · GHSA-fc75-58r8-rm3h

medium2023-10-19

CVE-2023-5654-React Developer Tools extension Improper Authorization vulnerability

View chart →

facebook/react · GHSA-rxrc-rgv4-jpvx

medium2023-10-19

CVE-2023-45813-TorBot vulnerable to Inefficient Regular Expression Complexity in validate_link

View chart →

dedsecinside/torbot · GHSA-72qw-p7hh-m3ff

high2023-10-19

CVE-2023-46227-Apache InLong Deserialization of Untrusted Data Vulnerability

View chart →

apache/inlong · GHSA-jj32-3pf5-5mv5