Security Advisories | GitStock

high2023-07-06

CVE-2023-30601-Apache Cassandra: Privilege escalation when enabling FQL/Audit logs

apache/cassandra · GHSA-m9p2-j4hg-g373

high2023-07-06

CVE-2023-33234-Apache Airflow CNCF Kubernetes Provider: KubernetesPodOperator RCE via connection configuration

apache/airflow · GHSA-2rx4-9f5h-9gjf

critical2023-07-06

CVE-2023-33246-Apache RocketMQ may have remote code execution vulnerability when using update configuration function

apache/rocketmq · GHSA-x3cq-8f32-5f63

critical2023-07-06

CVE-2023-31066-Apache InLong has Files or Directories Accessible to External Parties in Apache InLong

apache/inlong · GHSA-wx79-r3q8-fq9h

critical2023-07-06

CVE-2023-31098-Apache InLong has Weak Password Requirements in Apache InLong

apache/inlong · GHSA-w3wr-gmwf-r333

high2023-07-06

CVE-2023-31454-Apache InLong vulnerable to Incorrect Permission Assignment for Critical Resource

apache/inlong · GHSA-rf76-whgp-fp56

critical2023-07-06

CVE-2023-31062-Apache InLong Improper Privilege Management vulnerability

apache/inlong · GHSA-q5p5-xg93-2jqc

high2023-07-06

CVE-2023-31206-Apache InLong Exposure of Resource to Wrong Sphere vulnerability

apache/inlong · GHSA-f475-jgg3-3jwc

high2023-07-06

CVE-2023-28709-Apache Tomcat - Fix for CVE-2023-24998 was incomplete

apache/tomcat · GHSA-cx6h-86xw-9x34

high2023-07-06

CVE-2023-31058-Apache InLong Deserialization of Untrusted Data Vulnerability

apache/inlong · GHSA-c3rh-f2w5-fghm

high2023-07-06

CVE-2023-31453-Apache InLong Incorrect Permission Assignment for Critical Resource Vulnerability

apache/inlong · GHSA-8rjh-3mhm-966q

high2023-07-06

CVE-2023-31103-Apache InLong Exposure of Resource to Wrong Sphere vulnerability

apache/inlong · GHSA-7mhc-76hf-3jp9

critical2023-07-06

CVE-2023-31065-Apache InLong Insufficient Session Expiration vulnerability

apache/inlong · GHSA-757p-7hp5-pqmr

high2023-07-06

CVE-2023-31064-Apache InLong has Files or Directories Accessible to External Parties

apache/inlong · GHSA-3p9p-59qf-mqwh

medium2023-07-06

CVE-2023-28936-Apache OpenMeetings insufficient authorization vulnerability

apache/openmeetings · GHSA-v93h-rwj8-78qh

high2023-07-06

CVE-2022-45048-Apache Ranger code execution vulnerability in policy expressions

apache/ranger · GHSA-89gw-cffj-mqg9

high2023-07-06

CVE-2023-37260-league/oauth2-server key exposed in exception message when passing as a string and providing an invalid pass phrase

thephpleague/oauth2-server · GHSA-wj7q-gjg8-3cpm

medium2023-07-06

CVE-2023-36830-SQLFluff users with access to config file, using `libary_path` may call arbitrary python code

sqlfluff/sqlfluff · GHSA-jqhc-m2j3-fjrx

medium2023-07-06

CVE-2023-36828-Statamic's Antlers sanitizer cannot effectively sanitize malicious SVG

statamic/cms · GHSA-6r5g-cq4q-327g

low2023-07-06

CVE-2023-41044-Graylog server has partial path traversal vulnerability in Support Bundle feature

graylog2/graylog2-server · GHSA-2q4p-f6gf-mqr5