Security Advisories

medium2023-08-25

CVE-2023-41080-Apache Tomcat Open Redirect vulnerability

View chart

apache/tomcat · GHSA-q3mw-pvr8-9ggc

high2023-08-25

CVE-2023-24621-Esoteric YamlBeans Unsafe Deserialization vulnerability

View chart

esotericsoftware/yamlbeans · GHSA-jm7r-4pg6-gf26

medium2023-08-25

CVE-2023-40579-OpenFGA Authorization Bypass

View chart

openfga/openfga · GHSA-jcf2-mxr2-gmqp

medium2023-08-25

CVE-2023-40587-Pyramid static view path traversal up one directory

View chart

pylons/pyramid · GHSA-j8g2-6fc7-q8f8

high2023-08-25

CVE-2023-32079-Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User

View chart

gravitl/netmaker · GHSA-826j-8wp2-4x6q

high2023-08-25

CVE-2023-32078-Netmaker IDOR Allows User to Update Other User's Password

View chart

gravitl/netmaker · GHSA-256m-j5qw-38f4

high2023-08-25

CVE-2023-32077-Netmaker has Hardcoded DNS Secret Key

View chart

gravitl/netmaker · GHSA-8x8h-hcq8-jwwx

high2023-08-25

webpki: CPU denial of service in certificate path building

View chart

briansmith/webpki · GHSA-8qv2-5vq6-g2g7

high2023-08-24

CVE-2023-40583-libp2p nodes vulnerable to OOM attack

View chart

libp2p/go-libp2p · GHSA-gcq9-qqwx-rgj3

low2023-08-24

ntpd has Dependency on Vulnerable Third-Party Component

View chart

pendulum-project/ntpd-rs · GHSA-37xq-q42p-rv3p

medium2023-08-24

CVE-2023-41167-@webiny/react-rich-text-renderer vulnerable to insecure rendering of rich text content

View chart

webiny/webiny-js · GHSA-3x59-vrmc-5mx6

low2023-08-24

CVE-2023-40030-Malicious dependencies can inject arbitrary JavaScript into cargo-generated timing reports

View chart

rust-lang/cargo · GHSA-wrrj-h57r-vx9p

high2023-08-24

CVE-2023-34040-Spring-Kafka has Java Deserialization vulnerability When Improperly Configured

View chart

spring-projects/spring-kafka · GHSA-crqf-q9fp-hwjw

low2023-08-24

Minimal `basti` IAM Policy Allows Shell Access

View chart

bohdanpetryshyn/basti · GHSA-q4pp-j36h-3gqg

medium2023-08-23

CVE-2023-40577-Alertmanager UI is vulnerable to stored XSS via the /api/v1/alerts endpoint

View chart

prometheus/alertmanager · GHSA-v86x-5fm3-5p7j

critical2023-08-23

CVE-2023-40573-XWiki Platform's Groovy jobs check the wrong author, allowing remote code execution

View chart

xwiki/xwiki-platform · GHSA-8xhr-x3v8-rghj

high2023-08-23

CVE-2023-40572-XWiki Platform vulnerable to CSRF privilege escalation/RCE via the create action

View chart

xwiki/xwiki-platform · GHSA-4f8m-7h83-9f6m

medium2023-08-23

CVE-2023-38037-Active Support Possibly Discloses Locally Encrypted Files

View chart

rails/rails · GHSA-cr5q-6q9f-rq6q

medium2023-08-23

SilverStripe CMS Cross-site Scripting vulnerabilities inherited from TinyMCE

View chart

silverstripe/silverstripe-admin · GHSA-jxcx-3h54-qqxx

high2023-08-23

CVE-2023-37379-Apache Airflow denial of service vulnerability

View chart

apache/airflow · GHSA-x2mh-8fmc-rqgh