Security Advisories

high2023-09-11

CVE-2023-32186-RKE2 supervisor port is vulnerable to unauthenticated remote denial-of-service (DoS) attack via TLS SAN stuffing attack

View chart

rancher/rke2 · GHSA-p45j-vfv5-wprq

high2023-09-11

CVE-2023-32187-K3s apiserver port is vulnerable to unauthenticated remote denial-of-service (DoS) attack via TLS SAN stuffing attack

View chart

k3s-io/k3s · GHSA-m4hf-6vgr-75r2

medium2023-09-11

CVE-2023-40584-Argo CD repo-server Denial of Service vulnerability

View chart

argoproj/argo-cd · GHSA-g687-f2gx-6wm8

critical2023-09-11

CVE-2023-40029-Argo CD cluster secret might leak in cluster details page

View chart

argoproj/argo-cd · GHSA-fwr2-64vr-xv9m

critical2023-09-09

CVE-2023-42276-hutool Buffer Overflow vulnerability

View chart

dromara/hutool · GHSA-rxgf-r843-g53h

high2023-09-09

CVE-2023-42278-hutool Buffer Overflow vulnerability

View chart

dromara/hutool · GHSA-rr66-qh5m-w6mx

critical2023-09-09

CVE-2023-42277-hutool Buffer Overflow vulnerability

View chart

dromara/hutool · GHSA-7p8c-crfr-q93p

medium2023-09-09

CVE-2023-41564-Cockpit CMS arbitrary file upload vulnerability

View chart

cockpit-hq/cockpit · GHSA-38vf-35cg-m73w

high2023-09-08

CVE-2023-41578-Jeecg boot arbitrary file read vulnerability

View chart

jeecgboot/jeecg-boot · GHSA-pm8v-ppx7-8hr4

critical2023-09-08

CVE-2023-42268-Jeecg boot SQL Injection vulnerability

View chart

jeecgboot/jeecg-boot · GHSA-m7vh-pgfq-v4rq

medium2023-09-08

CVE-2023-4782-Terraform allows arbitrary file write during the `init` operation

View chart

hashicorp/terraform · GHSA-h626-pv66-hhm7

high2023-09-08

CVE-2023-39584-Hexo `include_code` has a path traversal

View chart

hexojs/hexo · GHSA-x2jc-989c-47q4

medium2023-09-08

CVE-2023-41338-Fiber unauthorized access vulnerability in `ctx.IsFromLocal()`

View chart

gofiber/fiber · GHSA-3q5p-3558-364f

medium2023-09-08

CVE-2023-41318-matrix-media-repo: Unsafe media served inline on download endpoints

View chart

turt2live/matrix-media-repo · GHSA-5crw-6j7v-xc72

low2023-09-08

CVE-2023-41329-Domain restrictions bypass via DNS Rebinding in WireMock and WireMock Studio webhooks, proxy and recorder modes

View chart

wiremock/wiremock · GHSA-pmxq-pj47-j8j4

critical2023-09-08

CVE-2023-41330-Snappy PHAR deserialization vulnerability

View chart

knplabs/snappy · GHSA-92rv-4j2h-8mjj

medium2023-09-08

CVE-2023-41646-Buttercup allows attackers to obtain the hash of the master password

View chart

buttercup/buttercup-core · GHSA-7cwq-p8cr-h9qg

high2023-09-07

CVE-2023-41319-Remote Code Execution in Custom Integration Upload

View chart

ethyca/fides · GHSA-p6p2-qq95-vq5h

medium2023-09-07

SecureJoin: on windows, paths outside of the rootfs could be inadvertently produced

View chart

cyphar/filepath-securejoin · GHSA-6xv5-86q9-7xr8

medium2023-09-07

CVE-2023-41317-Apollo Router Unnamed "Subscription" operation results in Denial-of-Service

View chart

apollographql/router · GHSA-w8vq-3hf9-xppx