Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    CVE-2024-2142
    No fix available
    Packages

    Summary

    Published
    30 Mar 2024
    CVE-2024-2141
    No fix available
    Packages

    Summary

    Published
    30 Mar 2024
    CVE-2024-2140
    No fix available
    Packages

    Summary

    Published
    30 Mar 2024
    BELL-CVE-2024-3094
    Fix available
    Packages

    xz, xz

    Summary

    Published
    30 Mar 2024
    BELL-CVE-2023-52629
    Fix available
    Packages

    linux-lts, linux-lts

    Summary

    Published
    30 Mar 2024
    CVE-2024-2047
    No fix available
    Packages

    Summary

    Published
    30 Mar 2024
    CVE-2024-1238
    No fix available
    Packages

    Summary

    Published
    30 Mar 2024
    CVE-2024-0367
    No fix available
    Packages

    Summary

    Published
    30 Mar 2024
    CVE-2024-29278
    No fix available
    Packages

    Summary

    Published
    30 Mar 2024
    CVE-2024-28288
    No fix available
    Packages

    Summary

    Published
    30 Mar 2024
    SUSE-SU-2024:1074-1
    Fix available
    Packages

    qpid-proton, qpid-proton

    Summary

    Security update for qpid-proton

    Published
    30 Mar 2024
    OSV-2024-217
    Fix available
    Packages

    libxml2

    Summary

    Heap-use-after-free in dropNode

    Published
    30 Mar 2024
    GHSA-34h3-8mw4-qw57
    Fix available
    Packages

    @electron/packager

    Summary

    @electron/packager's build process memory potentially leaked into final executable

    Published
    29 Mar 2024
    GHSA-35w3-6qhc-474v
    Fix available
    Packages

    @workos-inc/authkit-nextjs

    Summary

    @workos-inc/authkit-nextjs session replay vulnerability

    Published
    29 Mar 2024
    GHSA-cj3c-5xpm-cx94
    Fix available
    Packages

    kimai/kimai

    Summary

    Kimai API returns timesheet entries a user should not be authorized to view

    Published
    29 Mar 2024
    GHSA-x768-cvr2-345r
    Fix available
    Packages

    github.com/swift-server/swift-prometheus

    Summary

    Un-sanitized metric name or labels can be used to take over exported metrics

    Published
    29 Mar 2024
    GHSA-jhwx-mhww-rgc3
    Fix available
    Packages

    github.com/argoproj/argo-cd/v2, github.com/argoproj/argo-cd/v2, github.com/argoproj/argo-cd/v2

    Summary

    ArgoCD's repo server has Uncontrolled Resource Consumption vulnerability

    Published
    29 Mar 2024
    GHSA-w387-5qqw-7g8m
    Fix available
    Packages

    @kindspells/astro-shield

    Summary

    Content-Security-Policy header generation in middleware could be compromised by malicious injections

    Published
    29 Mar 2024
    GHSA-73v2-rxqp-7q4f
    No fix available
    Packages

    aliyundrive-webdav, aliyundrive-webdav

    Summary

    aliyundrive-webdav vulnerable to Command Injection

    Published
    29 Mar 2024
    GHSA-8r5j-gm3j-cx9c
    No fix available
    Packages

    wintercms/winter

    Summary

    Winter CMS Server-Side Template Injection (SSTI) vulnerability

    Published
    29 Mar 2024
    CVE-2024-30442
    No fix available
    Packages

    Summary

    Published
    29 Mar 2024
    Packages

    xz-utils, xz-utils

    Summary

    Published
    29 Mar 2024
    Packages

    lighttpd, lighttpd, lighttpd, lighttpd, xz, xz, xz, xz, xz

    Summary

    Published
    29 Mar 2024
    CVE-2024-30463
    No fix available
    Packages

    Summary

    Published
    29 Mar 2024
    CVE-2024-30462
    No fix available
    Packages

    Summary

    Published
    29 Mar 2024
    CVE-2024-30455
    No fix available
    Packages

    Summary

    Published
    29 Mar 2024
    CVE-2024-30454
    No fix available
    Packages

    Summary

    Published
    29 Mar 2024
    CVE-2024-30446
    No fix available
    Packages

    Summary

    Published
    29 Mar 2024
    CVE-2024-29640
    No fix available
    Packages

    Summary

    Published
    29 Mar 2024
    CVE-2024-25944
    No fix available
    Packages

    Summary

    Published
    29 Mar 2024
    Packages

    xz-utils, xz-utils, xz-utils

    Summary

    Published
    29 Mar 2024
    CVE-2024-3094
    No fix available
    Packages

    Summary

    Xz: malicious code in distributed source

    Published
    29 Mar 2024
    GHSA-39fp-mqmm-gxj6
    Fix available
    Packages

    codeigniter4/framework

    Summary

    CodeIgniter4 DoS Vulnerability

    Published
    29 Mar 2024
    CVE-2024-30645
    No fix available
    Packages

    Summary

    Published
    29 Mar 2024
    CVE-2024-30513
    No fix available
    Packages

    Summary

    Published
    29 Mar 2024
    CVE-2024-30482
    No fix available
    Packages

    Summary

    Published
    29 Mar 2024
    CVE-2024-30477
    No fix available
    Packages

    Summary

    Published
    29 Mar 2024
    CVE-2024-30469
    No fix available
    Packages

    Summary

    Published
    29 Mar 2024
    CVE-2024-30247
    Fix available
    Packages

    Summary

    Command Injection as root in NextCloudPi web panel

    Published
    29 Mar 2024
    CVE-2024-30246
    Fix available
    Packages

    Summary

    Tuleap deleting or moving an artifact can delete values from unrelated artifacts

    Published
    29 Mar 2024
    SUSE-SU-2024:1072-1
    Fix available
    Packages

    kernel-livepatch-SLE15-SP4_Update_20

    Summary

    Security update for the Linux Kernel (Live Patch 20 for SLE 15 SP4)

    Published
    29 Mar 2024
    SUSE-SU-2024:1063-1
    Fix available
    Packages

    kernel-livepatch-SLE15-SP4_Update_11

    Summary

    Security update for the Linux Kernel (Live Patch 11 for SLE 15 SP4)

    Published
    29 Mar 2024
    CVE-2024-29904
    Fix available
    Packages

    Summary

    CodeIgniter4 Language class DoS Vulnerability

    Published
    29 Mar 2024
    CVE-2024-29901
    Fix available
    Packages

    Summary

    @workos-inc/authkit-nextjs session replay vulnerability

    Published
    29 Mar 2024
    CVE-2024-29900
    Fix available
    Packages

    Summary

    @electron/packager's build process memory potentially leaked into final executable

    Published
    29 Mar 2024
    CVE-2024-30508
    No fix available
    Packages

    Summary

    Published
    29 Mar 2024
    CVE-2024-30505
    No fix available
    Packages

    Summary

    Published
    29 Mar 2024
    CVE-2024-30504
    No fix available
    Packages

    Summary

    Published
    29 Mar 2024
    CVE-2024-30502
    No fix available
    Packages

    Summary

    Published
    29 Mar 2024
    CVE-2024-28405
    No fix available
    Packages

    Summary

    Published
    29 Mar 2024