Security advisories

medium2023-07-05

CVE-2023-33201-Bouncy Castle For Java LDAP injection vulnerability

View chart →

bcgit/bc-java · GHSA-hr8g-6v94-x4m9

medium2023-07-04

CVE-2023-2974-quarkus-core vulnerable to client driven TLS cipher downgrading

View chart →

quarkusio/quarkus · GHSA-3fhx-3vvg-2j84

medium2023-07-03

CVE-2023-2727-kube-apiserver vulnerable to policy bypass

View chart →

kubernetes/kubernetes · GHSA-qc2g-gmh6-95p4

medium2023-07-03

CVE-2023-2728-Kubernetes mountable secrets policy bypass

View chart →

kubernetes/kubernetes · GHSA-cgcv-5272-97pr

critical2023-07-03

CVE-2023-36258-langchain arbitrary code execution vulnerability

View chart →

hwchase17/langchain · GHSA-2qmj-7962-cjq8

high2023-07-03

CVE-2023-36053-Django has regular expression denial of service vulnerability in EmailValidator/URLValidator

View chart →

django/django · GHSA-jh3w-4vvf-mjgr

critical2023-07-03

CVE-2023-35797-Apache Airflow Hive Provider Beeline remote code execution with Principal

View chart →

apache/airflow · GHSA-hg6c-qqcm-r79r

medium2023-07-01

CVE-2023-26136-tough-cookie Prototype Pollution vulnerability

View chart →

salesforce/tough-cookie · GHSA-72xf-g2v4-qvf3

high2023-07-01

CVE-2023-30589-llhttp vulnerable to HTTP request smuggling

View chart →

nodejs/llhttp · GHSA-cggh-pq45-6h9x

critical2023-06-30

CVE-2023-36812-Remote Code Execution for 2.4.1 and earlier

View chart →

opentsdb/opentsdb · GHSA-76f7-9v52-v2fw

medium2023-06-30

CVE-2023-36807-PyPDF2 vulnerable to possible Infinite Loop when reading malformed objects

View chart →

py-pdf/pypdf · GHSA-hm9v-vj3r-r55m

medium2023-06-30

CVE-2023-36810-PyPDF2 quadratic runtime with malformed PDF missing xref marker

View chart →

py-pdf/pypdf · GHSA-jrm6-h9cq-8gqw

low2023-06-30

github.com/cosmos/cosmos-sdk's x/crisis does not charge ConstantFee

View chart →

cosmos/cosmos-sdk · GHSA-w5w5-2882-47pc

medium2023-06-30

s2n-quic potential denial of service vulnerability when receiving empty UDP packets

View chart →

aws/s2n-quic · GHSA-hxq4-mx37-fqvg

medium2023-06-30

CVE-2023-37365-hnswlib Double Free vulnerability

View chart →

nmslib/hnswlib · GHSA-xwc8-rf6m-xr86

critical2023-06-30

CVE-2023-31543-pipreqs vulnerable to Dependency Confusion

View chart →

bndr/pipreqs · GHSA-v4f4-23wc-99mh

critical2023-06-30

CVE-2023-36468-Upgrading doesn't prevent exploiting vulnerable XWiki documents

View chart →

xwiki/xwiki-platform · GHSA-8q9q-r9v2-644m

critical2023-06-30

CVE-2023-36469-XWiki Platform vulnerable to Code injection through NotificationRSSService

View chart →

xwiki/xwiki-platform · GHSA-94pf-92hw-2hjc

critical2023-06-30

CVE-2023-36470-XWiki Platform vulnerable to Code Injection in icon themes

View chart →

xwiki/xwiki-platform · GHSA-fm68-j7ww-h9xf

critical2023-06-30

CVE-2023-36471-org.xwiki.commons:xwiki-commons-xml's HTML sanitizer allows form elements in restricted

View chart →

xwiki/xwiki-commons · GHSA-6pqf-c99p-758v