Security advisories

medium2023-09-06

CVE-2023-36387-Apache Superset has improper default REST API permission for Gamma users

View chart →

apache/superset · GHSA-9832-mgg4-3gr6

medium2023-09-06

CVE-2023-36388-Apache Superset Server Side Request Forgery vulnerability

View chart →

apache/superset · GHSA-4fg9-5w46-xmrj

high2023-09-06

CVE-2023-38201-Keylime registrar and (untrusted) Agent can be bypassed by an attacker

View chart →

keylime/keylime · GHSA-f4r5-q63f-gcww

high2023-09-05

CVE-2023-28434-Privilege Escalation on Linux/MacOS

View chart →

minio/minio · GHSA-2pxw-r47w-4p8c

critical2023-09-05

CVE-2023-40743-Apache Axis 1.x (EOL) may allow RCE when untrusted input is passed to getService

View chart →

apache/axis-axis1-java · GHSA-rmqp-9w4c-gc7w

medium2023-09-05

CVE-2023-20897-Salt vulnerable to denial of service

View chart →

saltstack/salt · GHSA-vpjg-wmf8-29h9

medium2023-09-05

CVE-2023-20898-Salt can cause Git Providers to get wrong data

View chart →

saltstack/salt · GHSA-qvh6-3j7x-3hq7

medium2023-09-05

CVE-2023-36307-Index out of bounds leading to crash

View chart →

simonwaldherr/zplgfa · GHSA-xgmm-3vvr-6c8j

high2023-09-04

CVE-2023-41058-Trigger `beforeFind` not invoked in internal query pipeline when fetching pointer

View chart →

parse-community/parse-server · GHSA-fcv6-fg5r-jm9q

low2023-09-04

CVE-2023-41057-Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in hyper-bump-it

View chart →

plannigan/hyper-bump-it · GHSA-xc27-f9q3-4448

low2023-09-04

Multiple soundness issues in lexical

View chart →

alexhuszagh/rust-lexical · GHSA-c2hm-mjxv-89r4

medium2023-09-04

CVE-2023-41052-incorrect order of evaluation of side effects for some builtins

View chart →

vyperlang/vyper · GHSA-4hg4-9mf5-wxxq

medium2023-09-04

CVE-2023-40015-Vyper: reversed order of side effects for some operations

View chart →

vyperlang/vyper · GHSA-g2xh-c426-v8mf

medium2023-09-04

CVE-2023-41046-Velocity execution without script right through VelocityCode and VelocityWiki property

View chart →

xwiki/xwiki-platform · GHSA-m5m2-h6h9-p2c8

high2023-09-04

CVE-2023-41049-Improper Neutralization of Script in Attributes in @dcl/single-sign-on-client

View chart →

decentraland/single-sign-on-client · GHSA-vp4f-wxgw-7x8x

low2023-09-04

CVE-2023-41051-Default functions in VolatileMemory trait lack bounds checks, potentially leading to out-of-bounds memory accesses

View chart →

rust-vmm/vm-memory · GHSA-49hh-fprx-m68g

critical2023-09-01

tss-lib leaks secret keys in response to incorrectly constructed Paillier moduli

View chart →

threshold-network/tss-lib · GHSA-h24c-6p6p-m3vx

critical2023-09-01

CVE-2023-39631-Langchain vulnerable to arbitrary code execution via the evaluate function in the numexpr library

View chart →

langchain-ai/langchain · GHSA-f73w-4m7g-ch9x

high2023-09-01

CVE-2023-40771-DataEase vulnerable to SQL injection

View chart →

dataease/dataease · GHSA-8rv7-g772-pp3j

high2023-09-01

CVE-2023-39685-hson-java vulnerable to denial of service

View chart →

hjson/hjson-java · GHSA-94w5-rf69-2h6c