Security Advisories

low2023-09-27

CVE-2023-41332-Specific Cilium configurations vulnerable to DoS via Kubernetes annotations

View chart

cilium/cilium · GHSA-24m5-r6hv-ccgp

critical2023-09-26

CVE-2023-43644-sing-box vulnerable to improper authentication in the SOCKS inbound

View chart

sagernet/sing-box · GHSA-r5hm-mp3j-285g

medium2023-09-26

CVE-2023-42460-Vyper's `_abi_decode` input not validated in complex expressions

View chart

vyperlang/vyper · GHSA-cx2q-hfxr-rj97

medium2023-09-26

CVE-2023-42453-matrix-synapse vulnerable to improper validation of receipts allows forged read receipts

View chart

matrix-org/synapse · GHSA-7565-cq32-vx2x

low2023-09-26

CVE-2023-41335-matrix-synapse vulnerable to temporary storage of plaintext passwords during password changes

View chart

matrix-org/synapse · GHSA-4f74-84v3-j9q5

medium2023-09-26

CVE-2023-39347-Kubernetes users may update Pod labels to bypass network policy

View chart

cilium/cilium · GHSA-gj2r-phwg-6rww

medium2023-09-25

CVE-2022-4245-codehaus-plexus vulnerable to XML injection

View chart

codehaus-plexus/plexus-utils · GHSA-jcwr-x25h-x5fh

medium2023-09-25

CVE-2023-53158-gix-transport code execution vulnerability

View chart

gitoxidelabs/gitoxide · GHSA-rrjw-j4m2-mf34

critical2023-09-25

CVE-2023-43364-Searchor CLI's Search vulnerable to Arbitrary Code using Eval

View chart

arjunsharda/searchor · GHSA-66m2-493m-crh2

high2023-09-25

CVE-2023-43642-snappy-java's missing upper bound check on chunk length can lead to Denial of Service (DoS) impact

View chart

xerial/snappy-java · GHSA-55g7-9cwv-5qfv

medium2023-09-25

CVE-2023-42817-pimcore/admin-ui-classic-bundle Cross-site Scripting vulnerability in Translations

View chart

pimcore/admin-ui-classic-bundle · GHSA-m988-7375-7g2c

high2023-09-25

CVE-2023-40581- yt-dlp on Windows vulnerable to `--exec` command injection when using `%q`

View chart

yt-dlp/yt-dlp · GHSA-42h4-v29r-42qg

critical2023-09-25

CVE-2023-41419-Gevent allows remote attacker to escalate privileges

View chart

gevent/gevent · GHSA-x7m3-jprg-wc5g

high2023-09-24

CVE-2023-1260-kube-apiserver authentication bypass vulnerability

View chart

openshift/apiserver-library-go · GHSA-92hx-3mh6-hc49

medium2023-09-24

CVE-2023-1636-OpenStack Barbican information disclosure vulnerability

View chart

openstack/barbican · GHSA-6rx9-c2rh-3qv4

medium2023-09-24

CVE-2023-1633-OpenStack Barbican credential leak flaw

View chart

openstack/barbican · GHSA-6qqp-4vm3-359v

high2023-09-24

CVE-2023-1625-OpenStack Heat information leak vulnerability

View chart

openstack/heat · GHSA-5836-grcc-8j89

medium2023-09-23

CVE-2022-3962-Kiali content spoofing vulnerability

View chart

kiali/kiali · GHSA-6f4m-j56w-55c3

high2023-09-22

CVE-2023-42821-Markdown vulnerable to Out-of-bounds Read while parsing citations

View chart

gomarkdown/markdown · GHSA-m9xq-6h2j-65r2

medium2023-09-22

CVE-2023-42811-AEADs/aes-gcm: Plaintext exposed in decrypt_in_place_detached even on tag verification failure

View chart

rustcrypto/aeads · GHSA-423w-p2w9-r7vq