Security advisories

critical2023-06-30

CVE-2023-36475-Parse Server vulnerable to remote code execution via MongoDB BSON parser through prototype pollution

View chart →

parse-community/parse-server · GHSA-462x-c3jw-7vr6

critical2023-06-30

CVE-2023-36477-XWiki Platform vulnerable to persistent Cross-site Scripting through CKEditor Configuration pages

View chart →

xwiki/xwiki-platform · GHSA-793w-g325-hrw2

high2023-06-30

CVE-2023-36815-Sealos billing system permission control defect

View chart →

labring/sealos · GHSA-vpxf-q44g-w34w

medium2023-06-30

CVE-2023-23684-WPGraphQL Plugin vulnerable to Server Side Request Forgery (SSRF)

View chart →

wp-graphql/wp-graphql · GHSA-cfh4-7wq9-6pgg

medium2023-06-30

CVE-2023-36464-pypdf and PyPDF2 possible Infinite Loop when a comment isn't followed by a character

View chart →

py-pdf/pypdf · GHSA-4vvm-4w3v-6mr8

high2023-06-30

CVE-2023-2422-Keycloak vulnerable to Improper Client Certificate Validation for OAuth/OpenID clients

View chart →

keycloak/keycloak · GHSA-3qh5-qqj2-c78f

critical2023-06-30

CVE-2022-4361-Keycloak vulnerable to cross-site scripting when validating URI-schemes on SAML and OIDC

View chart →

keycloak/keycloak · GHSA-3p62-6fjh-3p5h

medium2023-06-30

CVE-2023-1664-Keycloak Untrusted Certificate Validation vulnerability

View chart →

keycloak/keycloak · GHSA-5cc8-pgp5-7mpm

low2023-06-30

CVE-2023-2585-Client Spoofing within the Keycloak Device Authorisation Grant

View chart →

keycloak/keycloak · GHSA-f5h4-wmp5-xhg6

critical2023-06-30

CVE-2023-33190-Improper configuration of RBAC permissions obtaining cluster control permissions

View chart →

labring/sealos · GHSA-74j8-w7f9-pp62

low2023-06-30

atty potential unaligned read

View chart →

softprops/atty · GHSA-g98v-hv3f-hcfr

low2023-06-30

CVE-2023-3485-Temporal Server vulnerable to Incorrect Authorization and Insecure Default Initialization of Resource

View chart →

temporalio/temporal · GHSA-gm2g-2xr9-pxxj

medium2023-06-30

CVE-2023-37302-MediaWiki Cross-site Scripting vulnerability

View chart →

wikimedia/mediawiki · GHSA-fmrf-p77g-vv5c

medium2023-06-30

CVE-2023-34840-angular-ui-notification Cross-site Scripting vulnerability

View chart →

alexcrack/angular-ui-notification · GHSA-mrcj-5qxr-vhp2

medium2023-06-30

CVE-2023-37298-Joplin Cross-site Scripting vulnerability

View chart →

laurent22/joplin · GHSA-7grw-xfx6-qhx6

medium2023-06-30

CVE-2023-37299-Joplin Cross-site Scripting vulnerability

View chart →

laurent22/joplin · GHSA-4jjv-p8x9-rrf7

high2023-06-30

CVE-2023-26135-flatnest Prototype Pollution vulnerability

View chart →

brycebaril/node-flatnest · GHSA-7px2-3c2p-q4v4

medium2023-06-30

CVE-2023-3469-phpMyFAQ Cross-site Scripting

View chart →

thorsten/phpmyfaq · GHSA-v6g2-jwrm-h5r5

high2023-06-29

CVE-2020-26710-easy-parse XML External Entity Injection vulnerability

View chart →

uncmath25/easy-parse · GHSA-vv6q-6hwp-vrgp

high2023-06-29

CVE-2020-26709-py-xml XML External Entity Injection vulnerability

View chart →

pinaeos/py-xml · GHSA-j6v2-mwxm-f952