Open Source Vulnerabilities
mongoose
Prototype Pollution in automattic/mongoose
golang
Infinite loop in parsing in go/scanner
mongodb
Certificate validation issue in MongoDB Server running on Windows or macOS
mongodb
Certificate validation issue in MongoDB Server running on Windows or macOS
moodle
Moodle: forum summary report shows students from other groups when in separate groups mode
moodle
Moodle: forum summary report shows students from other groups when in separate groups mode
dotnet
.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability
dotnet
.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability
minio
Minio Information Disclosure in Cluster Deployment
gitlab
Improper Control of Generation of Code ('Code Injection') in GitLab
gitlab
Improper Control of Generation of Code ('Code Injection') in GitLab
discourse
Topic Title Validation Skipped When Changing Category in Discourse
discourse
Topic Title Validation Skipped When Changing Category in Discourse
envoy
Crash when tunneling TCP over HTTP in Envoy
mlflow
Server-Side Request Forgery (SSRF)
mastodon
Mastodon vulnerable to arbitrary file creation through media attachments
mastodon
Mastodon vulnerable to arbitrary file creation through media attachments
dotnet-sdk
.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability
dotnet-sdk
.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability
grafana
Grafana account takeover via OAuth vulnerability
grafana
Grafana account takeover via OAuth vulnerability
airflow
Session still functional after user is deactivated
airflow
Session still functional after user is deactivated
golang
Backticks not treated as string delimiters in html/template
golang
Backticks not treated as string delimiters in html/template
minio
Minio Privilege Escalation on Windows via Path separator manipulation
minio
Minio Privilege Escalation on Windows via Path separator manipulation
dotnet
.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability
dotnet
.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability
mastodon
Mastodon vulnerable to Denial of Service through slow HTTP responses
mastodon
Mastodon vulnerable to Denial of Service through slow HTTP responses
mlflow
Path Traversal: '\..\filename'
gitlab
Missing Authorization in GitLab
apache
mod_session NULL pointer dereference
envoy
Incorrect configuration handling allows TLS session re-use without re-validation in Envoy
envoy
Incorrect configuration handling allows TLS session re-use without re-validation in Envoy
discourse
CSP nonce reuse vulnerability in Discourse
dotnet-sdk
.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability
dotnet-sdk
.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability
grafana
Grafana plugin signature bypass vulnerability
