Security advisories

medium2023-06-10

CVE-2023-3191-Teampass Cross-site Scripting vulnerability

View chart →

nilsteampassnet/teampass · GHSA-qmw8-x364-xxxm

medium2023-06-10

CVE-2023-3190-Teampass Cross-site Scripting vulnerability

View chart →

nilsteampassnet/teampass · GHSA-p7xm-g427-jxfc

high2023-06-10

CVE-2023-26132-dottie vulnerable to Prototype Pollution

View chart →

mickhansen/dottie.js · GHSA-4gxf-g5gf-22h4

high2023-06-09

CVE-2019-12291-HashiCorp Consul Incorrect Access Control vulnerability

View chart →

hashicorp/consul · GHSA-h65h-v7fw-4p38

high2023-06-09

CVE-2023-34232-Snowflake NodeJS Driver vulnerable to Command Injection

View chart →

snowflakedb/snowflake-connector-nodejs · GHSA-h53w-7qw7-vh5c

high2023-06-09

CVE-2023-34231-Snowflake Golang Driver vulnerable to Command Injection

View chart →

snowflakedb/gosnowflake · GHSA-fwv2-65wh-2w8c

high2023-06-09

CVE-2023-34233-Snowflake Python Connector vulnerable to Command Injection

View chart →

snowflakedb/snowflake-connector-python · GHSA-5w5m-pfw9-c8fp

medium2023-06-09

CVE-2023-34238-Gatsby develop server has Local File Inclusion vulnerability

View chart →

gatsbyjs/gatsby · GHSA-c6f8-8r25-c4gc

medium2023-06-09

CVE-2023-34239-Gradio vulnerable to arbitrary file read and proxying of arbitrary URLs

View chart →

gradio-app/gradio · GHSA-3qqg-pgqq-3695

high2023-06-09

CVE-2023-34245-@udecode/plate-link does not sanitize URLs to prevent use of the `javascript:` scheme

View chart →

udecode/plate · GHSA-4882-hxpr-hrvm

medium2023-06-09

CVE-2023-23913-rails-ujs vulnerable to DOM Based Cross-site Scripting contenteditable HTML Elements

View chart →

rails/rails · GHSA-xp5h-f8jf-rc8q

medium2023-06-09

CVE-2023-27531-Kredis JSON Possible Deserialization of Untrusted Data Vulnerability

View chart →

rails/kredis · GHSA-h2wm-p2vg-6pw4

high2023-06-09

CVE-2023-34230-Snowflake Connector .Net Command Injection

View chart →

snowflakedb/snowflake-connector-net · GHSA-223g-8w3x-98wr

high2023-06-09

CVE-2022-24777-Denial of Service via reachable assertion

View chart →

grpc/grpc-swift · GHSA-r6ww-5963-7r95

high2023-06-09

CVE-2022-0618-Denial of service via HTTP/2 HEADERS frames padding

View chart →

apple/swift-nio-http2 · GHSA-q36x-r5x4-h4q6

medium2023-06-09

CVE-2021-37634-LeafKit allows XSS with untrusted user input

View chart →

vapor/leaf-kit · GHSA-rv3x-xq3r-8j9h

high2023-06-09

CVE-2021-36153-Incomplete Internal State Distinction in GRPCWebToHTTP2ServerCodec

View chart →

grpc/grpc-swift · GHSA-2jx2-qcm4-rf9h

high2023-06-09

CVE-2021-36155-Uncontrolled Resource Consumption in LengthPrefixedMessageReader

View chart →

grpc/grpc-swift · GHSA-rxmj-hg9v-vp3p

medium2023-06-09

CVE-2021-32742-Untrusted data fed into `Data.init(base32Encoded:)` can result in exposing server memory and/or crash

View chart →

vapor/vapor · GHSA-pqwh-c2f3-vxmq

medium2023-06-09

CVE-2021-21328-Vapor's Metrics integration could cause a system drain

View chart →

vapor/vapor · GHSA-gcj9-jj38-hwmc