Security advisories

medium2023-10-04

CVE-2023-4237-Ansible may expose private key

View chart →

ansible/ansible · GHSA-ww3m-ffrm-qvqv

high2023-10-04

Zod denial of service vulnerability during email validation

View chart →

robintail/express-zod-api · GHSA-mvrp-3cvx-c325

medium2023-10-04

CVE-2023-44378-gnark unsoundness in variable comparison / non-unique binary decomposition

View chart →

consensys/gnark · GHSA-498w-5j49-vqjg

high2023-10-04

CVE-2023-1584-Quarkus OIDC can leak both ID and access tokens

View chart →

quarkusio/quarkus · GHSA-6hc9-cf8x-hf83

high2023-10-03

Presto JDBC Server-Side Request Forgery by nextUri

View chart →

prestodb/presto · GHSA-86q5-qcjc-7pv4

high2023-10-03

Presto JDBC Server-Side Request Forgery by redirect

View chart →

prestodb/presto · GHSA-xm7x-f3w2-4hjm

high2023-10-03

CVE-2023-26152-static-server Path Traversal vulnerability

View chart →

nbluis/static-server · GHSA-v834-rhv4-65m3

high2023-10-03

CVE-2023-26151-asyncua vulnerable to denial of service via infinite loop

View chart →

freeopcua/opcua-asyncio · GHSA-gfvq-mxw3-mfq3

high2023-10-03

CVE-2023-26150-asyncua Improper Authentication vulnerability

View chart →

freeopcua/opcua-asyncio · GHSA-2894-qcqf-g23g

high2023-10-02

CVE-2023-43809-Soft Serve Public Key Authentication Bypass Vulnerability when Keyboard-Interactive SSH Authentication is Enabled

View chart →

charmbracelet/soft-serve · GHSA-mc97-99j4-vm2v

high2023-10-02

CVE-2023-43810-opentelemetry-instrumentation Denial of Service vulnerability due to unbound cardinality metrics

View chart →

open-telemetry/opentelemetry-python-contrib · GHSA-5rv5-6h4r-h22v

high2023-10-02

CVE-2023-43804-`Cookie` HTTP header isn't stripped on cross-origin redirects

View chart →

urllib3/urllib3 · GHSA-v845-jxx5-vc9f

medium2023-10-02

Wallabag user can disable 2FA unintentionally

View chart →

wallabag/wallabag · GHSA-56fm-hfp3-x3w3

medium2023-10-02

CVE-2023-44463-pretix potential IP address spoofing vulnerability

View chart →

pretix/pretix · GHSA-j9gq-w73w-9h6c

critical2023-10-02

CVE-2023-43654-TorchServe Server-Side Request Forgery vulnerability

View chart →

pytorch/serve · GHSA-8fxr-qfr9-p34w

critical2023-10-02

TorchServe Pre-Auth Remote Code Execution

View chart →

pytorch/serve · GHSA-4mqg-h5jf-j9m7

medium2023-10-01

CVE-2023-5323-Dolibarr Cross-site Scripting vulnerability

View chart →

dolibarr/dolibarr · GHSA-39m3-cj8c-886r

medium2023-09-30

CVE-2023-5318-Microweber uses hard coded credentials

View chart →

microweber/microweber · GHSA-r657-3wqh-g2x9

medium2023-09-30

CVE-2023-5227-phpMyFAQ allows unrestricted file types in image field

View chart →

thorsten/phpmyfaq · GHSA-qcjg-hvg6-hxcp

critical2023-09-30

CVE-2023-5320-phpMyFAQ Cross-site Scripting vulnerability

View chart →

thorsten/phpmyfaq · GHSA-pp4w-g5p4-85p2