Security Advisories | GitStock

high2023-10-17

CVE-2023-40180-Silverstripe GraphQL has DDOS Vulnerability due to lack of protection against recursive queries

silverstripe/silverstripe-graphql · GHSA-v23w-pppm-jh66

medium2023-10-17

CVE-2023-45669-WebAuthn4J Spring Security Improper signature counter value handling

webauthn4j/webauthn4j-spring-security · GHSA-v9hx-v6vf-g36j

critical2023-10-17

CVE-2023-45144-XWiki Identity Oauth Privilege escalation (PR)/remote code execution from login screen through unescaped URL parameter

xwikisas/identity-oauth · GHSA-h2rm-29ch-wfmh

high2023-10-17

github.com/kumahq/kuma affected by CVE-2023-44487

kumahq/kuma · GHSA-9wmc-rg4h-28wv

high2023-10-17

CVE-2023-45141-Go Fiber CSRF Token Validation Vulnerability

gofiber/fiber · GHSA-mv73-f69x-444p

critical2023-10-17

CVE-2023-45128-CSRF Token Reuse Vulnerability

gofiber/fiber · GHSA-94w9-97p3-p368

critical2023-10-17

CVE-2023-44310-Liferay Portal and Liferay DXP Vulnerable to XSS via the Page Tree Menu

liferay/liferay-portal · GHSA-j5gv-w838-mmcx

critical2023-10-17

CVE-2023-42628-Liferay Portal and Liferay DXP Vulnerable to XSS in the Wiki Widget

liferay/liferay-portal · GHSA-hv45-r2f5-fmhj

critical2023-10-17

CVE-2023-44311-Liferay Portal and Liferay DXP Vulnerable to XSS via the OAuth2ProviderApplicationRedirect Class

liferay/liferay-portal · GHSA-49gm-5685-8fxv

critical2023-10-17

CVE-2023-42497-Liferay Portal and Liferay DXP Vulnerable to Reflected XSS via the Export for Translation Page

liferay/liferay-portal · GHSA-w2g3-j73q-7qv7

critical2023-10-17

CVE-2023-44309-Liferay Portal and Liferay DXP Vulnerable to XSS in the Fragment Components

liferay/liferay-portal · GHSA-j663-6jpj-xx8c

critical2023-10-17

CVE-2023-42629-Liferay Portal and Liferay DXP Vulnerable to Stored XSS in the Manage Vocabulary Page

liferay/liferay-portal · GHSA-g44j-f8wm-6622

high2023-10-17

CVE-2023-54365-Traefik vulnerable to HTTP/2 request causing denial of service

traefik/traefik · GHSA-7v4p-328v-8v5g

critical2023-10-17

CVE-2023-45138-XWiki Change Request Application UI XSS and remote code execution through change request title

xwiki-contrib/application-changerequest · GHSA-f776-w9v2-7vfj

low2023-10-16

CVE-2023-41881-vantage6 does not properly delete linked resources when deleting a collaboration

vantage6/vantage6 · GHSA-rf54-7qrr-96j6

critical2023-10-16

CVE-2023-43661-Cachet vulnerable to Authenticated Remote Code Execution

cachethq/cachet · GHSA-hv79-p62r-wg3p

low2023-10-16

CVE-2023-45143-Undici's cookie header not cleared on cross-origin redirect in fetch

nodejs/undici · GHSA-wqq4-5wpv-mx2g

high2023-10-16

CVE-2023-45142-OpenTelemetry-Go Contrib vulnerable to denial of service in otelhttp due to unbound cardinality metrics

open-telemetry/opentelemetry-go-contrib · GHSA-rcjv-mgp8-qvmr

critical2023-10-16

CVE-2023-45133-Babel vulnerable to arbitrary code execution when compiling specifically crafted malicious code

babel/babel · GHSA-67hx-6x53-jw92

medium2023-10-16

CVE-2023-4457-Google Sheets data source plugin for Grafana information disclosure vulnerability

grafana/google-sheets-datasource · GHSA-37x5-qpm8-53rq