Security advisories

critical2023-10-06

CVE-2023-5214-Puppet Bolt privilege escalation vulnerability

View chart →

puppetlabs/bolt · GHSA-289m-2964-f8q5

high2023-10-06

Bundled libwebp in pywebp vulnerable

View chart →

anibali/pywebp · GHSA-f9pm-4g9p-6vm3

medium2023-10-06

CVE-2023-44770-Zenario CMS Cross-site Scripting vulnerability

View chart →

tribalsystems/zenario · GHSA-mr4w-7vm9-cgqx

medium2023-10-06

CVE-2023-44771-Zenario CMS Cross-site Scripting vulnerability

View chart →

tribalsystems/zenario · GHSA-6cxv-27r2-fp3m

medium2023-10-06

CVE-2023-44766-ConcreteCMS Cross-site Scripting vulnerability

View chart →

concretecms/concretecms · GHSA-437p-jfm4-2387

medium2023-10-06

CVE-2023-44761-ConcreteCMS Cross-site Scripting vulnerability

View chart →

concretecms/concretecms · GHSA-p4jj-gwpg-9jwh

medium2023-10-06

CVE-2023-44764-ConcreteCMS Cross-site Scripting vulnerability

View chart →

concretecms/concretecms · GHSA-j6h5-ggv2-3rfv

medium2023-10-06

CVE-2023-44765-ConcreteCMS Cross-site Scripting vulnerability

View chart →

concretecms/concretecms · GHSA-6xx7-r8x4-fpjp

medium2023-10-06

CVE-2023-44762-ConcreteCMS Cross-site Scripting vulnerability

View chart →

concretecms/concretecms · GHSA-6fm3-r6mf-j875

critical2023-10-06

CVE-2023-26153-geokit-rails Command Injection vulnerability

View chart →

geokit/geokit-rails · GHSA-7xvc-v44j-46fh

low2023-10-05

gnark-crypto's exponentiation in the pairing target group GT using GLV can give incorrect results

View chart →

consensys/gnark-crypto · GHSA-pffg-92cg-xf5c

high2023-10-05

CVE-2023-4570-NI MeasurementLink Python Services Improper Access Restriction vulnerability

View chart →

ni/measurementlink-python · GHSA-3f48-9j7q-q2gv

medium2023-10-05

CVE-2023-44386-Vapor's incorrect request error handling triggers server crash

View chart →

vapor/vapor · GHSA-3mwq-h3g6-ffhm

medium2023-10-05

CVE-2023-36820-io.micronaut.security:micronaut-security-oauth2 has invalid IdTokenClaimsValidator logic on aud

View chart →

micronaut-projects/micronaut-security · GHSA-qw22-8w9r-864h

high2023-10-05

CVE-2023-36465-Decidim has broken access control in templates

View chart →

decidim/decidim · GHSA-639h-86hw-qcjq

high2023-10-05

CefSharp affected by libvpx's heap buffer overflow in vp8 encoding

View chart →

cefsharp/cefsharp · GHSA-4c29-gfrp-g6x9

high2023-10-05

Bundled libwebp in imagecodecs vulnerable

View chart →

cgohlke/imagecodecs · GHSA-94vc-p8w7-5p49

medium2023-10-04

CVE-2023-44390-HtmlSanitizer vulnerable to Cross-site Scripting in Foreign Content

View chart →

mganss/htmlsanitizer · GHSA-43cp-6p3q-2pc4

low2023-10-04

CVE-2023-44389-Zope management interface vulnerable to stored cross site scripting via the title property

View chart →

zopefoundation/zope · GHSA-m755-gxxg-r5qh

medium2023-10-04

CVE-2023-45023-TYPO3 extension femanager Broken Access Control vulnerability

View chart →

in2code-de/femanager · GHSA-93j4-v838-8767