Security advisories

medium2023-07-18

CVE-2023-37476-OpenRefine vulnerable to zip slip in project import

View chart →

openrefine/openrefine · GHSA-m88m-crr9-jvqq

medium2023-07-18

CVE-2023-37259-matrix-react-sdk vulnerable to XSS in Export Chat feature

View chart →

matrix-org/matrix-react-sdk · GHSA-c9vx-2g7w-rp65

medium2023-07-18

CVE-2022-47085-libostree vulnerable to denial of service attack

View chart →

ostreedev/ostree · GHSA-x96g-95fq-4xv4

critical2023-07-18

CVE-2018-25088-postgraas-server vulnerable to SQL injection

View chart →

blue-yonder/postgraas_server · GHSA-vghm-8cjp-hjw6

low2023-07-17

topgrade Time-of-check Time-of-use (TOCTOU) Race Condition in remove_dir_all

View chart →

topgrade-rs/topgrade · GHSA-f2wx-xjfw-xjv6

critical2023-07-17

CVE-2023-37266-CasaOS contains weak JWT secrets

View chart →

icewhaletech/casaos · GHSA-m5q5-8mfw-p2hr

critical2023-07-17

CVE-2023-37265-CasaOS Gateway vulnerable to incorrect identification of source IP addresses

View chart →

icewhaletech/casaos-gateway · GHSA-vjh7-5r6x-xh6g

medium2023-07-17

CVE-2023-34036-Spring HATEOAS vulnerable to Improper Neutralization of HTTP Headers for Scripting Syntax

View chart →

spring-projects/spring-hateoas · GHSA-7m5c-fgwf-mwph

high2023-07-17

CVE-2023-37475-avro vulnerable to denial of service via attacker-controlled parameter

View chart →

hamba/avro · GHSA-9x44-9pgq-cf45

medium2023-07-17

CVE-2023-3700-Easy!Appointments Improper Access Control vulnerability

View chart →

alextselegidis/easyappointments · GHSA-8c6q-26w6-qwhg

critical2023-07-17

CVE-2023-3696-Mongoose Prototype Pollution vulnerability

View chart →

automattic/mongoose · GHSA-9m93-w8w6-76hh

medium2023-07-16

CVE-2023-3691-layui vulnerable to cross-site scripting

View chart →

layui/layui · GHSA-hx4h-676r-j3qp

medium2023-07-16

CVE-2023-3692-Admidio vulnerable to Unrestricted Upload of File with Dangerous Type

View chart →

admidio/admidio · GHSA-q347-jrx8-5pw9

critical2023-07-15

CVE-2023-2507-CleverTap Cordova plugin vulnerable to Cross-site Scripting

View chart →

clevertap/clevertap-cordova · GHSA-x2ph-qqwm-9cc6

high2023-07-15

CVE-2023-38337-rswag vulnerable to arbitrary JSON and YAML file read via directory traversal

View chart →

rswag/rswag · GHSA-vc79-65pr-q82v

high2023-07-14

CVE-2023-37474-copyparty vulnerable to path traversal attack

View chart →

9001/copyparty · GHSA-pxfv-7rr3-2qjg

high2023-07-14

CVE-2023-37473-zenstruck/collection passing callable string to EntityRepository::find() and query()

View chart →

zenstruck/collection · GHSA-7xr2-8ff7-6fjq

high2023-07-14

CVE-2022-23465-SwiftTerm Code Injection vulnerability

View chart →

migueldeicaza/swiftterm · GHSA-jq43-q8mx-r7mq

critical2023-07-14

CVE-2023-37462-org.xwiki.platform:xwiki-platform-skin-ui Eval Injection vulnerability

View chart →

xwiki/xwiki-platform · GHSA-h4vp-69r8-gvjg

high2023-07-14

CVE-2023-34236-Weave GitOps Terraform Controller Information Disclosure Vulnerability

View chart →

weaveworks/tf-controller · GHSA-6hvv-j432-23cv