Security advisories

high2023-08-23

CVE-2023-40273-Apache Airflow Session Fixation vulnerability

View chart →

apache/airflow · GHSA-pm87-24wq-r8w9

medium2023-08-23

CVE-2023-39441-Apache Airflow missing Certificate Validation

View chart →

apache/airflow · GHSA-5f35-pq34-c87q

high2023-08-23

CVE-2023-40025-Argo CD web terminal session doesn't expire

View chart →

argoproj/argo-cd · GHSA-c8xw-vjgf-94hr

high2023-08-23

CVE-2022-25024-json2xml Uncaught Exception vulnerability

View chart →

vinitkumar/json2xml · GHSA-8rj5-2857-877j

medium2023-08-23

CVE-2023-41100-hCaptcha for EXT:form Broken Access Control vulnerability

View chart →

waldhacker/ext-hcaptcha · GHSA-93wx-j2qv-49fg

high2023-08-22

CVE-2023-39141-webui-aria2 Path Traversal vulnerability

View chart →

ziahamza/webui-aria2 · GHSA-crv8-r5wq-gv2w

critical2023-08-22

CVE-2023-36281-langchain vulnerable to arbitrary code execution

View chart →

langchain-ai/langchain · GHSA-7gfq-f96f-g85j

high2023-08-22

CVE-2022-44729-Apache XML Graphics Batik Server-Side Request Forgery vulnerability

View chart →

apache/xmlgraphics-batik · GHSA-gq5f-xv48-2365

medium2023-08-22

CVE-2022-45582-Horizon Web Dashboard Open Redirect vulnerability

View chart →

openstack/horizon · GHSA-5pv6-rprw-82wv

medium2023-08-22

CVE-2022-44730-Apache Batik information disclosure vulnerability

View chart →

apache/xmlgraphics-batik · GHSA-2474-2566-3qxp

medium2023-08-22

CVE-2023-40570-Datasette 1.0 alpha series leaks names of databases and tables to unauthenticated users

View chart →

simonw/datasette · GHSA-7ch3-7pp7-7cpq

high2023-08-22

rustls-webpki: CPU denial of service in certificate path building

View chart →

rustls/webpki · GHSA-fh2r-99q2-6mmg

high2023-08-22

CVE-2023-38976-Weaviate denial of service vulnerability

View chart →

weaviate/weaviate · GHSA-8697-479h-5mfp

high2023-08-22

CVE-2023-40185-Shescape on Windows escaping may be bypassed in threaded context

View chart →

ericcornelissen/shescape · GHSA-j55r-787p-m549

medium2023-08-22

CVE-2023-4301-Jenkins Fortify Plugin cross-site request forgery vulnerability

View chart →

jenkinsci/fortify-plugin · GHSA-3fjv-8r82-6xm9

medium2023-08-22

CVE-2023-4303-Jenkins Fortify Plugin HTML injection vulnerability

View chart →

jenkinsci/fortify-plugin · GHSA-223m-pgcq-f3xg

medium2023-08-22

CVE-2023-4302-Jenkins Fortify Plugin missing permission check

View chart →

jenkinsci/fortify-plugin · GHSA-4xmf-344q-m4cc

medium2023-08-21

CVE-2023-4453-Pimcore Cross-site Scripting (XSS) vulnerability in DataObject datetime fields

View chart →

pimcore/pimcore · GHSA-599v-h3q5-g6r9

medium2023-08-21

CVE-2023-4454-Wallabag user can reset data unintentionally

View chart →

wallabag/wallabag · GHSA-p8gp-899c-jvq9

medium2023-08-21

CVE-2023-4455-Wallabag user can delete own API client unintentionally

View chart →

wallabag/wallabag · GHSA-gjvc-55fw-v6vq