Security advisories

high2023-09-30

CVE-2023-5319-phpMyFAQ Cross-site Scripting vulnerability

View chart →

thorsten/phpmyfaq · GHSA-j5ww-5xf4-hqm2

medium2023-09-30

CVE-2023-5317-phpMyFaq Cross-site Scripting vulnerability

View chart →

thorsten/phpmyfaq · GHSA-5jwv-m8h3-69cg

critical2023-09-30

CVE-2023-5316-phpMyFAQ Cross-site Scripting vulnerability

View chart →

thorsten/phpmyfaq · GHSA-58v7-58c2-qwm9

medium2023-09-30

CVE-2023-44270-PostCSS line return parsing error

View chart →

postcss/postcss · GHSA-7fh5-64p2-3v2j

high2023-09-29

CVE-2023-43655-Composer Remote Code Execution vulnerability via web-accessible composer.phar

View chart →

composer/composer · GHSA-jm6m-4632-36hf

low2023-09-29

CometBFT's default for `BlockParams.MaxBytes` consensus parameter may increase block times and affect consensus participation

View chart →

cometbft/cometbft · GHSA-hq58-p9mv-338c

high2023-09-29

CVE-2023-39410-Apache Avro Java SDK vulnerable to Improper Input Validation

View chart →

apache/avro · GHSA-rhrv-645h-fjfh

high2023-09-29

CVE-2023-5289-Rdiffweb Allocation of Resources Without Limits or Throttling vulnerability

View chart →

ikus060/rdiffweb · GHSA-c4rv-2j6x-pq7x

low2023-09-29

CVE-2023-5159-Mattermost Incorrect Authorization vulnerability

View chart →

mattermost/mattermost · GHSA-rp65-jpc7-8h8p

low2023-09-29

CVE-2023-5193-Mattermost Incorrect Authorization vulnerability

View chart →

mattermost/mattermost · GHSA-h8wh-f7gw-fwpr

medium2023-09-29

CVE-2023-5194-Mattermost Incorrect Authorization vulnerability

View chart →

mattermost/mattermost · GHSA-h69v-mvh9-hfrq

medium2023-09-29

CVE-2023-5195-Mattermost Incorrect Authorization vulnerability

View chart →

mattermost/mattermost · GHSA-9hwp-cj7m-wjw4

medium2023-09-29

CVE-2023-5196-Mattermost Uncontrolled Resource Consumption vulnerability

View chart →

mattermost/mattermost · GHSA-33r7-wjfc-7w98

high2023-09-29

CVE-2023-44464-pretix allows Pillow to parse EPS files

View chart →

pretix/pretix · GHSA-9jvx-p6mq-fw4v

high2023-09-29

CVE-2023-5077-Hashicorp Vault Incorrect Permission Assignment for Critical Resource vulnerability

View chart →

hashicorp/vault · GHSA-86c6-3g63-5w64

critical2023-09-28

CVE-2023-5256-Cache poisoning in drupal/core

View chart →

drupal/core · GHSA-rjqg-3h9m-fx5x

medium2023-09-28

CVE-2023-4316-Zod denial of service vulnerability

View chart →

colinhacks/zod · GHSA-m95q-7qp3-xv42

medium2023-09-28

CVE-2023-43645-OpenFGA Vulnerable to DoS from circular relationship definitions

View chart →

openfga/openfga · GHSA-2hm9-h873-pgqh

high2023-09-28

CVE-2023-5217-Electron affected by libvpx's heap buffer overflow in vp8 encoding

View chart →

electron/electron · GHSA-qqvq-6xgj-jw8g

medium2023-09-28

CVE-2023-43663-PrestaShop allows users to uninstall modules from backoffice, even with low rights

View chart →

prestashop/prestashop · GHSA-6jmf-2pfc-q9m7