Security Advisories | GitStock

medium2023-09-07

CVE-2023-41050-Information disclosure in AccessControl

zopefoundation/accesscontrol · GHSA-8xv7-89vj-q48c

high2023-09-07

CVE-2023-4815-Answer Missing Authentication for Critical Function

answerdev/answer · GHSA-pj2h-85jq-g5vg

medium2023-09-06

CVE-2023-41327-WireMock Controlled Server Side Request Forgery vulnerability through URL

wiremock/wiremock · GHSA-hq8w-9w8w-pmx7

medium2023-09-06

Cosmos-SDK Cosmovisor component may be vulnerable to denial of service

cosmos/cosmos-sdk · GHSA-23px-mw2p-46qm

medium2023-09-06

CVE-2023-39956-Electron vulnerable to out-of-package code execution when launched with arbitrary cwd

electron/electron · GHSA-7x97-j373-85x5

medium2023-09-06

CVE-2023-29198-Electron context isolation bypass via nested unserializable return value

electron/electron · GHSA-p7v2-p9m8-qqg7

high2023-09-06

CVE-2023-40591-Go-Ethereum vulnerable to denial of service via malicious p2p message

ethereum/go-ethereum · GHSA-ppjg-v974-84cm

high2023-09-06

CVE-2023-28433-Minio vulnerable to Privilege Escalation on Windows via Path separator manipulation

minio/minio · GHSA-w23q-4hw3-2pp6

high2023-09-06

CVE-2023-23623-Electron's Content-Secrity-Policy disabling eval not applied consistently in renderers with sandbox disabled

electron/electron · GHSA-gxh7-wv9q-fwfr

critical2023-09-06

CVE-2021-36036-Magento improper access control vulnerability within Magento's Media Gallery Upload workflow

magento/magento2 · GHSA-wqr6-wv6c-p8fx

medium2023-09-06

CVE-2023-39265-Apache Superset Improper Input Validation vulnerability

apache/superset · GHSA-fm4q-j8g4-c9j4

medium2023-09-06

CVE-2023-37941-Apache Superset Deserialization of Untrusted Data vulnerability

apache/superset · GHSA-fj4x-m62j-wvwg

medium2023-09-06

CVE-2023-32672-Apache Superset has incorrect authorization check

apache/superset · GHSA-95ch-p3gw-23qg

critical2023-09-06

CVE-2021-36023-Magento XML Injection vulnerability in the Widgets Update Layout

magento/magento2 · GHSA-8cjg-f53m-8m9q

critical2023-09-06

CVE-2021-36021-Magento affected by remote code execution vulnerability in the CMS page scheduled update feature

magento/magento2 · GHSA-4g27-q2w9-m8m8

medium2023-09-06

CVE-2023-27523-Apache Superset vulnerable to improper data authorization

apache/superset · GHSA-v594-2c97-hx38

high2023-09-06

CVE-2023-41933-Job Configuration History Plugin's path traversal allows exploiting XXE vulnerability

jenkinsci/job-config-history-plugin · GHSA-ghjw-fcf6-rpr9

high2023-09-06

CVE-2023-41936-Jenkins Google Login Plugin non-constant time token comparison

jenkinsci/google-login-plugin · GHSA-g58x-57fv-86jh

medium2023-09-06

CVE-2023-39264-Apache Superset may expose internal traces on REST API endpoints

apache/superset · GHSA-cpvx-2365-466c

medium2023-09-06

CVE-2023-27526-Apache Superset users may incorrectly create resources using the import charts feature

apache/superset · GHSA-9qc3-p9jq-2x27