Security Advisories | GitStock

medium2023-10-19

CVE-2023-25753-Apache Shenyu Server Side Request Forgery vulnerability

apache/shenyu · GHSA-7w8v-5fcq-pvqw

high2023-10-19

CVE-2023-46229-LangChain Server Side Request Forgery vulnerability

langchain-ai/langchain · GHSA-655w-fm8m-m478

medium2023-10-18

CVE-2024-43806-rustix's `rustix::fs::Dir` iterator with the `linux_raw` backend can cause memory explosion

bytecodealliance/rustix · GHSA-c827-hfw6-qwvm

high2023-10-18

CVE-2023-45811-Synchrony deobfuscator prototype pollution vulnerability leading to arbitrary code execution

relative/synchrony · GHSA-jg82-xh3w-rhxx

high2023-10-18

CVE-2023-45810-OpenFGA DoS vulnerability

openfga/openfga · GHSA-hr4f-6jh8-f2vq

medium2023-10-18

CVE-2023-43803-Arduino Create Agent path traversal - arbitrary file deletion vulnerability

arduino/arduino-create-agent · GHSA-m5jc-r4gf-c6p8

high2023-10-18

CVE-2023-43802-Arduino Create Agent path traversal - local privilege escalation vulnerability

arduino/arduino-create-agent · GHSA-75j7-w798-cwwx

medium2023-10-18

CVE-2023-43801-Arduino Create Agent path traversal - arbitrary file deletion vulnerability

arduino/arduino-create-agent · GHSA-mjq6-pv9c-qppq

high2023-10-18

CVE-2023-43800-Arduino Create Agent Insufficient Verification of Data Authenticity vulnerability

arduino/arduino-create-agent · GHSA-4x5q-q7wc-q22p

high2023-10-18

CVE-2023-42319-go-ethereum vulnerable to denial of service via crafted GraphQL query

ethereum/go-ethereum · GHSA-v9jh-j8px-98vq

high2023-10-18

CVE-2023-22102-MySQL Connectors takeover vulnerability

mysql/mysql-connector-j · GHSA-m6vm-37g8-gqvh

medium2023-10-17

CVE-2023-45803-urllib3's request body not stripped after redirect from 303 status changes request method to GET

urllib3/urllib3 · GHSA-g4mx-q9vg-27p4

critical2023-10-17

CVE-2023-42627-Liferay Portal and Liferay DXP Vulnerable to XSS in the Commerce Module

liferay/liferay-portal · GHSA-qp68-5v39-r869

medium2023-10-17

CVE-2023-45807-OpenSearch Issue with tenant read-only permissions

opensearch-project/security · GHSA-72q2-gwwf-6hrv

high2023-10-17

OpenSearch uncontrolled resource consumption

opensearch-project/security · GHSA-8wx3-324g-w4qq

critical2023-10-17

Plonk verifier KZG multi point verification

consensys/gnark · GHSA-7p92-x423-vwj6

critical2023-10-17

Prototype Pollution in ali-security/mongoose

ali-security/mongoose · GHSA-rc4v-99cr-pjcm

high2023-10-17

CVE-2023-45683-Cross-site Scripting via missing Binding syntax validation

crewjam/saml · GHSA-267v-3v32-g6q5

medium2023-10-17

CVE-2023-44394-MantisBT may disclose project names to unauthorized users

mantisbt/mantisbt · GHSA-v642-mh27-8j6m

medium2023-10-17

CVE-2023-43794-nocodb SQL Injection vulnerability

nocodb/nocodb · GHSA-3m5q-q39v-xf8f