Security advisories

medium2023-06-05

CVE-2023-34091-Kyverno resource with a deletionTimestamp may allow policy circumvention

View chart →

kyverno/kyverno · GHSA-hq4m-4948-64cc

medium2023-06-05

CVE-2023-32766-Gitpod vulnerable to Cross-site Scripting

View chart →

gitpod-io/gitpod · GHSA-gqx9-h3w2-fprg

high2023-06-05

CVE-2023-34411-xml-rs vulnerable to denial of service via invalid token in XML document

View chart →

netvl/xml-rs · GHSA-7gf7-jv65-wjmh

medium2023-06-04

CVE-2023-3095-TeamPass vulnerable to Improper Access Control

View chart →

nilsteampassnet/teampass · GHSA-g3jr-6vj4-3x82

critical2023-06-03

CVE-2023-3086-TeamPass vulnerable to stored Cross-site Scripting

View chart →

nilsteampassnet/teampass · GHSA-j245-v2mh-5h6f

high2023-06-03

CVE-2023-3084-TeamPass vulnerable to stored Cross-site Scripting

View chart →

nilsteampassnet/teampass · GHSA-8vm8-38pc-8xhh

high2023-06-03

CVE-2023-3083-TeamPass vulnerable to stored Cross-site Scripting

View chart →

nilsteampassnet/teampass · GHSA-c6fv-3jm9-6r8f

high2023-06-03

CVE-2023-2816-Hashicorp Consul allows user with service:write permissions to patch remote proxy instances

View chart →

hashicorp/consul · GHSA-rqjq-ww83-wv5c

medium2023-06-03

CVE-2023-1297-Hashicorp Consul vulnerable to denial of service

View chart →

hashicorp/consul · GHSA-c57c-7hrj-6q6v

high2023-06-02

CVE-2023-33964-mx-chain-go does not treat invalid transaction with wrong username correctly

View chart →

multiversx/mx-chain-go · GHSA-7xpv-4pm9-xch2

low2023-06-02

Vulnerable OpenSSL included in cryptography wheels

View chart →

pyca/cryptography · GHSA-5cpq-8wj7-hf2v

low2023-06-02

Go package github.com/cosmos/cosmos-sdk module x/crisis does NOT cause chain halt

View chart →

cosmos/cosmos-sdk · GHSA-qfc5-6r3j-jj22

high2023-06-02

CVE-2023-32310-DataEase API interface has IDOR vulnerability

View chart →

dataease/dataease · GHSA-7hv6-gv38-78wj

medium2023-06-01

PocketMine MP vulnerable to uncontrolled resource consumption via mismatched type of 'InventoryTransactionPacket'

View chart →

pmmp/pocketmine-mp · GHSA-42qm-8v8m-m78c

medium2023-06-01

CVE-2023-33544-hawtio vulnerable to Path Traversal

View chart →

hawtio/hawtio · GHSA-p223-c4w6-q454

medium2023-06-01

CVE-2023-33546-janino vulnerable to denial of service due to stack overflow

View chart →

janino-compiler/janino · GHSA-gcg6-xv4f-f749

high2023-05-31

CVE-2023-33966-Missing "--allow-net" permission check for built-in Node modules

View chart →

denoland/deno · GHSA-vc52-gwm3-8v2f

medium2023-05-31

CVE-2023-32689-Phishing attack vulnerability by uploading malicious HTML file

View chart →

parse-community/parse-server · GHSA-9prm-jqwx-45x9

low2023-05-31

CVE-2023-32684-In Lima, a malicious disk image could read a single file on the host filesystem as a qcow2/vmdk backing file

View chart →

lima-vm/lima · GHSA-f7qw-jj9c-rpq9

medium2023-05-31

CVE-2023-33736-Dcat-Admin vulnerable to Stored Cross-site Scripting

View chart →

jqhph/dcat-admin · GHSA-p74v-mwvg-8ghp