Security Advisories

high2023-07-06

CVE-2023-0690-HashiCorp Boundary Workers Store Rotated Credentials in Plaintext Even When Key Management Service Configured

View chart

hashicorp/boundary · GHSA-9vrm-v9xv-x3xr

high2023-07-06

CVE-2020-26302-is_js vulnerable to Regular Expression Denial of Service

View chart

arasatasaygin/is.js · GHSA-pvrw-g6fx-mcx2

medium2023-07-06

CVE-2021-28655-Apache Zeppelin Improper Input Validation vulnerability

View chart

apache/zeppelin · GHSA-gm67-h5wr-w3cv

critical2023-07-06

CVE-2022-24697-Apache Kylin vulnerable to remote code execution

View chart

apache/kylin · GHSA-ppxx-m926-g569

medium2023-07-06

CVE-2022-41316-HashiCorp Vault's revocation list not respected

View chart

hashicorp/vault · GHSA-9mh8-9j64-443f

medium2023-07-06

@vendure/admin-ui-plugin authenticated Cross-site Scripting vulnerability

View chart

vendure-ecommerce/vendure · GHSA-gm68-572p-q28r

high2023-07-06

CVE-2023-36189-langchain SQL Injection vulnerability

View chart

langchain-ai/langchain · GHSA-7q94-qpjr-xpgm

critical2023-07-06

CVE-2023-36188-langchain vulnerable to arbitrary code execution

View chart

langchain-ai/langchain · GHSA-57fc-8q82-gfp3

high2023-07-05

CVE-2023-36814-Products.CMFCore unauthenticated denial of service and crash via unchecked use of input with Python's marshal module

View chart

zopefoundation/products.cmfcore · GHSA-4hpj-8rhv-9x87

high2023-07-05

CVE-2023-36809-Kiwi TCMS's misconfigured HTTP headers allow stored XSS execution with Firefox

View chart

kiwitcms/kiwi · GHSA-jpgw-2r9m-8qfw

medium2023-07-05

Connect-CMS Privilege Escalation Vulnerability

View chart

opensource-workshop/connect-cms · GHSA-qxh3-jgvh-x55j

medium2023-07-05

CVE-2023-36458-1Panel vulnerable to command injection when entering the container terminal

View chart

1panel-dev/1panel · GHSA-7x2c-fgx6-xf9h

medium2023-07-05

CVE-2023-36457-1Panel vulnerable to command injection when adding container repositories

View chart

1panel-dev/1panel · GHSA-q2mx-gpjf-3h8x

high2023-07-05

CVE-2023-31999-@fastify/oauth2 vulnerable to Cross Site Request Forgery due to reused Oauth2 state

View chart

fastify/fastify-oauth2 · GHSA-g8x5-p9qc-cf95

high2023-07-05

CVE-2023-34457-MechanicalSoup vulnerable to malicious web server reading arbitrary files on client using file input inside HTML form

View chart

mechanicalsoup/mechanicalsoup · GHSA-x456-3ccm-m6j4

high2023-07-05

CVE-2023-34451-CometBFT may duplicate transactions in the mempool's data structures

View chart

cometbft/cometbft · GHSA-w24w-wp77-qffm

medium2023-07-05

CVE-2023-34450-CometBFT PeerState JSON serialization deadlock

View chart

cometbft/cometbft · GHSA-mvj3-qrqh-cjvr

low2023-07-05

CVE-2023-3515-code.gitea.io/gitea Open Redirect vulnerability

View chart

go-gitea/gitea · GHSA-cf6v-9j57-v6r6

critical2023-07-05

CVE-2023-36665-protobufjs Prototype Pollution vulnerability

View chart

protobufjs/protobuf.js · GHSA-h755-8qp9-cq85

medium2023-07-05

CVE-2023-34150-Apache Any23 vulnerable to excessive memory usage

View chart

apache/any23 · GHSA-2gpr-j5vj-wvh2