Security advisories

medium2023-08-16

CVE-2023-26140-@excalidraw/excalidraw Cross-site Scripting vulnerability

View chart →

excalidraw/excalidraw · GHSA-v7v8-gjv7-ffmr

medium2023-08-15

CVE-2023-40028-Ghost vulnerable to arbitrary file read via symlinks in content import

View chart →

tryghost/ghost · GHSA-9c9v-w225-v5rg

high2023-08-15

CVE-2023-40023-Yaklang Plugin's Fuzztag Component Allows Unauthorized Local File Reading

View chart →

yaklang/yaklang · GHSA-xvhg-w6qc-m3qq

medium2023-08-15

CVE-2023-40024-Scancode.io Reflected Cross-Site Scripting (XSS) in license endpoint

View chart →

nexb/scancode.io · GHSA-6xcx-gx7r-rccj

medium2023-08-15

CVE-2023-40027-When `ui.isAccessAllowed` is `undefined`, the `adminMeta` GraphQL query is publicly accessible

View chart →

keystonejs/keystone · GHSA-9cvc-v7wm-992c

critical2023-08-15

CVE-2023-38889-Alluxio vulnerable to arbitrary code execution

View chart →

alluxio/alluxio · GHSA-xrrh-h86w-pwfj

critical2023-08-15

CVE-2023-39659-LangChain vulnerable to arbitrary code execution

View chart →

langchain-ai/langchain · GHSA-prgp-w7vf-ch62

critical2023-08-15

CVE-2023-38860-LangChain vulnerable to arbitrary code execution

View chart →

hwchase17/langchain · GHSA-fj32-q626-pjjc

critical2023-08-15

CVE-2023-38896-LangChain vulnerable to arbitrary code execution

View chart →

langchain-ai/langchain · GHSA-92j5-3459-qgp4

critical2023-08-15

CVE-2023-39661-PandasAI vulnerable to arbitrary code execution

View chart →

gventuri/pandas-ai · GHSA-8fp9-43pw-56vw

critical2023-08-15

CVE-2023-39662-llama-index vulnerable to arbitrary code execution

View chart →

jerryjliu/llama_index · GHSA-2xxc-73fv-36f7

high2023-08-15

CVE-2023-4347-LibreNMS Cross-site Scripting vulnerability

View chart →

librenms/librenms · GHSA-m6pf-cm3f-7876

medium2023-08-14

Tornado vulnerable to HTTP request smuggling via improper parsing of `Content-Length` fields and chunk lengths

View chart →

tornadoweb/tornado · GHSA-qppv-j76h-2rpx

critical2023-08-14

CVE-2023-40013-external-svg-loader Cross-site Scripting vulnerability

View chart →

shubhamjain/svg-loader · GHSA-xc2r-jf2x-gjr8

medium2023-08-14

CVE-2023-38687-Svelecte item names vulnerable to execution of arbitrary JavaScript

View chart →

mskocik/svelecte · GHSA-7h45-grc5-89wq

medium2023-08-14

CVE-2022-50237-`ed25519-dalek` Double Public Key Signing Function Oracle Attack

View chart →

dalek-cryptography/ed25519-dalek · GHSA-w5vr-6qhr-36cc

medium2023-08-14

lakeFS vulnerable to Arbitrary JavaScript Injection via Direct Link to HTML Files

View chart →

treeverse/lakefs · GHSA-9phh-r37v-34wh

high2023-08-14

CVE-2023-0872-OpenNMS privilege elevation vulnerability

View chart →

opennms/opennms · GHSA-w5gq-xrrp-3fxf

medium2023-08-14

CVE-2023-40311-OpenNMS vulnerable to Cross-site Scripting

View chart →

opennms/opennms · GHSA-qfw7-pfxx-h9q2

medium2023-08-14

CVE-2023-40312-OpenNMS vulnerable to Cross-site Scripting

View chart →

opennms/opennms · GHSA-chgr-j2p9-jjh8