Security advisories

medium2023-06-09

CVE-2020-15230-Arbitrary file read using percent-encoded relative paths in FileMiddleware

View chart →

vapor/vapor · GHSA-vcvg-xgr8-p5gq

medium2023-06-09

CVE-2023-2121-Hashicorp Vault vulnerable to Cross-site Scripting

View chart →

hashicorp/vault · GHSA-gq98-53rq-qr5h

high2023-06-09

CVE-2023-3172-Froxlor vulnerable to Path Traversal

View chart →

froxlor/froxlor · GHSA-ghqq-jfx7-f6m9

critical2023-06-09

CVE-2023-3173-Froxlor vulnerable to Improper Restriction of Excessive Authentication Attempts

View chart →

froxlor/froxlor · GHSA-chw4-88xc-79w6

medium2023-06-08

CVE-2023-34234-OpenZeppelin Contracts's governor proposal creation may be blocked by frontrunning

View chart →

openzeppelin/openzeppelin-contracts · GHSA-5h3x-9wvq-w4m2

critical2023-06-07

CVE-2023-33496-xxl-rpc deserialization vulnerability

View chart →

xuxueli/xxl-rpc · GHSA-c29g-q3h3-mwcf

high2023-06-07

CVE-2022-31005-Vapor vulnerable to denial of service in HTTP Range Request of FileMiddleware

View chart →

vapor/vapor · GHSA-vj2m-9f5j-mpr5

high2023-06-07

CVE-2022-31019-Vapor vulnerable to denial of service in URLEncodedFormDecoder

View chart →

vapor/vapor · GHSA-qvxg-wjxc-r4gg

high2023-06-07

CVE-2022-1642-Swift-corelibs-foundation denial of service in JSON decoding with JSONDecoder

View chart →

apple/swift-corelibs-foundation · GHSA-239c-6cv2-wwx8

high2023-06-07

CVE-2022-3252-SwiftNIO Extras vulnerable to improper detection of complete HTTP body decompression

View chart →

apple/swift-nio-extras · GHSA-773g-x274-8qmf

medium2023-06-07

CVE-2022-3215-SwiftNIO vulnerable to Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')

View chart →

apple/swift-nio · GHSA-7fj7-39wj-c64f

high2023-06-07

CVE-2023-0040-Async HTTP Client has CRLF Injection vulnerability in HTTP request headers

View chart →

swift-server/async-http-client · GHSA-v3r5-pjpm-mwgq

medium2023-06-07

CVE-2023-3142-Microweber Cross-site Scripting vulnerability

View chart →

microweber/microweber · GHSA-fqcv-rfp6-wv92

high2023-06-07

CVE-2023-33498-alist Incorrect Access Control vulnerability

View chart →

alist-org/alist · GHSA-hh54-53m7-7ffj

high2023-06-06

CVE-2023-2801-Grafana Missing Synchronization vulnerability

View chart →

grafana/grafana · GHSA-x2w4-c67p-g44j

high2023-06-06

CVE-2023-31606-RedCloth Regular Expression Denial of Service issue

View chart →

jgarber/redcloth · GHSA-qcm3-vfq5-wfr2

high2023-06-06

CVE-2023-34104-fast-xml-parser vulnerable to Regex Injection via Doctype Entities

View chart →

naturalintelligence/fast-xml-parser · GHSA-6w63-h3fj-q4vw

high2023-06-06

CVE-2023-34102-avo possible unsafe reflection / partial DoS vulnerability

View chart →

avo-hq/avo · GHSA-86h2-2g4g-29qx

high2023-06-06

CVE-2023-33977-kiwitcms vulnerable to stored cross-site scripting via unrestricted file upload

View chart →

kiwitcms/kiwi · GHSA-2fqm-m4r2-fh98

high2023-06-06

CVE-2023-33959-notation-go's verification bypass can cause users to verify the wrong artifact

View chart →

notaryproject/notation-go · GHSA-xhg5-42rf-296r