Security Advisories | GitStock

medium2023-07-12

CVE-2023-37579-Apache Pulsar Function Worker Incorrect Authorization vulnerability

apache/pulsar · GHSA-74mc-g2xv-pch2

high2023-07-12

CVE-2023-22888-Apache Airflow Improper Input Validation vulnerability

apache/airflow · GHSA-5946-8p38-vffp

medium2023-07-12

CVE-2023-31007-Apache Pulsar Broker Improper Authentication vulnerability

apache/pulsar · GHSA-47r2-phr8-m8cp

high2023-07-12

CVE-2023-36543-Apache Airflow Improper Input Validation vulnerability

apache/airflow · GHSA-3h4m-m55v-gx4m

high2023-07-12

CVE-2023-35908-Apache Airflow Incorrect Authorization vulnerability

apache/airflow · GHSA-2h84-3crq-vgfj

high2023-07-12

CVE-2022-46651-Apache Airflow information disclosure vulnerability

apache/airflow · GHSA-xvw9-3mhm-xjqq

high2023-07-12

CVE-2022-45855-Apache Ambari Expression Language Injection vulnerability

apache/ambari · GHSA-p7w2-784m-qpq9

high2023-07-12

CVE-2022-42009-Apache Ambari Expression Language Injection vulnerability

apache/ambari · GHSA-m384-pj54-5vr2

high2023-07-12

CVE-2023-32200-Apache Jena Expression Language Injection vulnerability

apache/jena · GHSA-j927-w6g7-7c7w

medium2023-07-11

CVE-2023-32693-Decidim Cross-site Scripting vulnerability in the external link redirections

decidim/decidim · GHSA-469h-mqg8-535r

high2023-07-11

CVE-2023-34089-Decidim Cross-site Scripting vulnerability in the processes filter

decidim/decidim · GHSA-5652-92r9-3fx9

high2023-07-11

CVE-2023-34090-Decidim vulnerable to sensitive data disclosure

decidim/decidim · GHSA-jm79-9pm4-vrw9

critical2023-07-11

CVE-2023-36825-Orchid Deserialization of Untrusted Data vulnerability leads to Remote Code Execution

orchidsoftware/platform · GHSA-ph6g-p72v-pc3p

low2023-07-11

Vendure Cross Site Request Forgery vulnerability impacting all API requests

vendure-ecommerce/vendure · GHSA-h9wq-xcqx-mqxm

medium2023-07-11

A stored XSS in jaeger UI might allow an attacker who controls a trace to perform arbitrary jaeger queries

jaegertracing/jaeger · GHSA-2w8w-qhg4-f78j

high2023-07-11

CVE-2023-33127-Microsoft Security Advisory CVE-2023-33127: .NET Remote Code Execution Vulnerability

dotnet/runtime · GHSA-485r-rp8v-998v

high2023-07-11

CVE-2023-33170- Microsoft Security Advisory CVE-2023-33170: .NET Security Feature Bypass Vulnerability

dotnet/aspnetcore · GHSA-25c8-p796-jg6r

critical2023-07-11

CVE-2023-37659-xalpha vulnerable to Remote Code Execution

refraction-ray/xalpha · GHSA-jx3q-5rgf-vrrr

medium2023-07-11

CVE-2023-3620-tarteaucitron.js vulnerable to Cross-site Scripting

amauric/tarteaucitron.js · GHSA-f44m-65h3-99vc

medium2023-07-10

Whatsapp-Chat-Exporter has Cross-Site Scripting vulnerability in HTML output of chats.

knugihk/whatsapp-chat-exporter · GHSA-8c6x-g4fw-8rf4