Security advisories

high2023-09-01

CVE-2023-4698-usememos/memos vulnerable to improper input validation

View chart →

usememos/memos · GHSA-96gq-6ch5-mm54

high2023-09-01

CVE-2023-4697-usememos/memos vulnerable to privilege escalation

View chart →

usememos/memos · GHSA-5j6p-59cj-j6cp

medium2023-08-31

CVE-2023-41034-DDFFileParser is vulnerable to XXE Attacks

View chart →

eclipse-leshan/leshan · GHSA-wc9j-gc65-3cm7

high2023-08-31

CVE-2023-39137-Filename spoofing in archive

View chart →

brendan-duncan/archive · GHSA-r285-q736-9v95

high2023-08-31

CVE-2023-39135-Path traversal in Zip Swift

View chart →

marmelroy/zip · GHSA-g454-wj9r-jpg4

high2023-08-31

CVE-2023-39138-Path traversal in ZIPFoundation

View chart →

weichsel/zipfoundation · GHSA-c2cc-3569-6jh2

high2023-08-31

CVE-2023-39139-Path traversal in Archive

View chart →

brendan-duncan/archive · GHSA-9v85-q87q-g4vg

medium2023-08-31

CVE-2023-38970-Badaso vulnerable to cross-site scripting

View chart →

uasoft-indonesia/badaso · GHSA-7422-7rq6-j4qv

low2023-08-30

Prevent logging invalid header values

View chart →

apollographql/apollo-server · GHSA-j5g3-5c8r-7qfx

high2023-08-30

CVE-2023-41039-Sandbox escape via various forms of "format".

View chart →

zopefoundation/restrictedpython · GHSA-xjw2-6jm9-rf67

medium2023-08-30

Actions expression injection in `filter-test-configs` (`GHSL-2023-181`)

View chart →

pytorch/pytorch · GHSA-hw6r-g8gj-2987

medium2023-08-30

CVE-2023-41040-GitPython blind local file inclusion

View chart →

gitpython-developers/gitpython · GHSA-cwvm-v4w8-q58c

medium2023-08-30

CVE-2023-36811-Archive spoofing vulnerability in borgbackup

View chart →

borgbackup/borg · GHSA-8fjr-hghr-4m99

critical2023-08-30

CVE-2023-40582-Command Injection Vulnerability in find-exec

View chart →

shime/find-exec · GHSA-95rp-6gqp-6622

medium2023-08-29

CVE-2023-39968- Open Redirect Vulnerability in jupyter-server

View chart →

jupyter-server/jupyter_server · GHSA-r726-vmfq-j9j3

medium2023-08-29

CVE-2023-40170-cross-site inclusion (XSSI) of files in jupyter-server

View chart →

jupyter-server/jupyter_server · GHSA-64x5-55rw-9974

high2023-08-29

CVE-2023-40590-GitPython untrusted search path on Windows systems leading to arbitrary code execution

View chart →

gitpython-developers/gitpython · GHSA-wfm5-v35h-vwf4

medium2023-08-29

CVE-2023-26364-@adobe/css-tools Regular Expression Denial of Service (ReDOS) while Parsing CSS

View chart →

adobe/css-tools · GHSA-hpx4-r86g-5jrg

critical2023-08-29

CVE-2023-40889-Heap-based buffer overflow in ZBar

View chart →

mchehab/zbar · GHSA-mhp6-jvpx-2p4m

medium2023-08-29

CVE-2023-41037-Cleartext Signed Message Signature Spoofing in openpgp

View chart →

openpgpjs/openpgpjs · GHSA-ch3c-v47x-4pgp