Security advisories

high2023-07-29

CVE-2023-36542-Apache NiFi Code Injection vulnerability

View chart →

apache/nifi · GHSA-r969-8v3h-23v9

low2023-07-28

CVE-2023-37900-Denial of service from large image

View chart →

crossplane/crossplane · GHSA-68p4-95xf-7gx8

high2023-07-28

CVE-2023-38488-Field injection in the KirbyData text storage handler

View chart →

getkirby/kirby · GHSA-x5mr-p6v4-wp93

high2023-07-28

CVE-2023-38489-Insufficient Session Expiration after a password change

View chart →

getkirby/kirby · GHSA-5mvj-rvp8-rf45

medium2023-07-28

CVE-2023-38490-XML External Entity (XXE) vulnerability in the XML data handler

View chart →

getkirby/kirby · GHSA-q386-w6fg-gmgp

medium2023-07-28

CVE-2023-38491-Cross-site scripting (XSS) from MIME type auto-detection of uploaded files

View chart →

getkirby/kirby · GHSA-8fv7-wq38-f5c9

medium2023-07-28

CVE-2023-38492-Denial of service from unlimited password lengths

View chart →

getkirby/kirby · GHSA-3v6j-v3qc-cxff

high2023-07-28

CVE-2023-38495-Possible image tampering from missing image validation for Packages

View chart →

crossplane/crossplane · GHSA-pj4x-2xr5-w87m

critical2023-07-28

Anyone with a share link can RESET all website data in Umami

View chart →

umami-software/umami · GHSA-8www-cffh-4q98

critical2023-07-28

CVE-2023-38992-SQL injection in jeecg-boot

View chart →

jeecgboot/jeecg-boot-starter · GHSA-wp6c-29r3-jqw9

critical2023-07-28

CVE-2023-39013-Code injection in Duke

View chart →

larsga/duke · GHSA-p83q-99rc-vfmv

critical2023-07-28

CVE-2023-39015-Code injection in webmagic-core

View chart →

code4craft/webmagic · GHSA-grvq-vjqr-x8vm

critical2023-07-28

CVE-2023-39021-Code injection in wix-embedded-mysql

View chart →

wix/wix-embedded-mysql · GHSA-fx3v-4w3w-wpwr

critical2023-07-28

CVE-2023-39010-Code injection in BoofCV

View chart →

lessthanoptimal/boofcv · GHSA-99p5-qpqx-mhwc

critical2023-07-28

CVE-2023-39020-Code injection in stanford-parser

View chart →

stanfordnlp/corenlp · GHSA-353m-jh2m-72v4

critical2023-07-28

CVE-2023-37754-Code injection in PowerJob

View chart →

powerjob/powerjob · GHSA-2h26-qfxm-r3pq

low2023-07-28

CVE-2023-3990-Cross-site Scripting in Mingsoft MCMS

View chart →

ming-soft/mcms · GHSA-rxvj-5mv6-j5mc

low2023-07-27

Unsoundness in `intern` methods on `intaglio` symbol interners

View chart →

artichoke/intaglio · GHSA-gch5-hwqf-mxhp

medium2023-07-27

CVE-2023-38509-Obfuscated email addresses should not be sorted

View chart →

xwiki/xwiki-platform · GHSA-g9w4-prf3-m25g

high2023-07-27

Unsafe plugins can be installed via pack import by tenant admins

View chart →

saltcorn/saltcorn · GHSA-wxf3-4fvj-vqqx