Security advisories

high2023-06-20

CVE-2020-20726-GilaCMS Cross Site Request Forgery vulnerability

View chart →

gilacms/gila · GHSA-4cw3-rhqx-vqwr

medium2023-06-19

CVE-2023-35165-AWS CDK EKS overly permissive trust policies

View chart →

aws/aws-cdk · GHSA-rx28-r23p-2qc3

medium2023-06-19

CVE-2023-34459-OpenZeppelin Contracts using MerkleProof multiproofs may allow proving arbitrary leaves for specific trees

View chart →

openzeppelin/openzeppelin-contracts · GHSA-wprv-93r4-jj2p

high2023-06-19

CVE-2023-35005-Apache Airflow vulnerable to exposure of sensitive information

View chart →

apache/airflow · GHSA-mjff-wv85-hmcj

medium2023-06-19

CVE-2023-34603-JeecgBoot vulnerable to SQL injection in queryFilterTableDictInfo

View chart →

jeecgboot/jeecg-boot · GHSA-cvgc-465m-cw9g

medium2023-06-19

CVE-2023-34602-JeecgBoot vulnerable to SQL injection in queryTableDictItemsByCode

View chart →

jeecgboot/jeecg-boot · GHSA-784x-7w88-w564

critical2023-06-19

CVE-2023-35839-Solon vulnerable to deserialization of untrusted data

View chart →

noear/solon · GHSA-7q8c-49f4-4c8q

medium2023-06-18

CVE-2023-3308-Whaleal IceFrog is vulnerable to deserialization

View chart →

whaleal/icefrog · GHSA-rx62-5cw6-x29q

low2023-06-16

@apollo/server vulnerable to unsafe application of Content Security Policy via reused nonces

View chart →

apollographql/apollo-server · GHSA-68jh-rf6x-836f

high2023-06-16

CVE-2023-34448-Grav Server-side Template Injection (SSTI) via Twig Default Filters

View chart →

getgrav/grav · GHSA-whr7-m3f8-mpm8

high2023-06-16

CVE-2023-34253-Grav Server-side Template Injection (SSTI) via Denylist Bypass Vulnerability

View chart →

getgrav/grav · GHSA-j3v8-v77f-fvgm

high2023-06-16

CVE-2023-34252-Grav Server-side Template Injection (SSTI) via Twig Default Filters

View chart →

getgrav/grav · GHSA-96xv-rmwj-6p9w

critical2023-06-16

CVE-2023-34251-Grav Server Side Template Injection (SSTI) vulnerability

View chart →

getgrav/grav · GHSA-f9jf-4cp4-4fq5

medium2023-06-16

CVE-2023-34660-jeecg-boot unrestricted file upload vulnerability

View chart →

jeecgboot/jeecg-boot · GHSA-jf2f-hvxx-4rqx

critical2023-06-16

CVE-2023-34659-jeecg-boot SQL injection vulnerability

View chart →

jeecgboot/jeecg-boot · GHSA-934g-fvcc-4833

low2023-06-16

CVE-2023-34242-Cilium vulnerable to information leakage via incorrect ReferenceGrant handling

View chart →

cilium/cilium · GHSA-r7wr-4w5q-55m6

medium2023-06-16

CVE-2023-35783-ke_search (aka Faceted Search) vulnerable to Cross-Site Scripting

View chart →

tpwd/ke_search · GHSA-f4m6-x2xj-jc7w

high2023-06-16

CVE-2023-35782-ipandlanguageredirect extension vulnerable to SQL Injection

View chart →

einpraegsam/ipandlanguageredirect · GHSA-4xf2-7qfv-mgfx

medium2023-06-16

CVE-2023-2431-Kubelet vulnerable to bypass of seccomp profile enforcement

View chart →

kubernetes/kubernetes · GHSA-xc8m-28vv-4pjc

medium2023-06-16

CVE-2023-2783-Mattermost Server Missing Authorization vulnerability

View chart →

mattermost/mattermost-server · GHSA-455c-vqrf-mghr