Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    Packages

    drupal

    Summary

    Regular expression Denial of Service in dialog plugin

    Published
    6 Mar 2024
    Packages

    guacamole

    Summary

    Published
    6 Mar 2024
    Packages

    codeigniter

    Summary

    Published
    6 Mar 2024
    Packages

    guacamole-server

    Summary

    Published
    6 Mar 2024
    Packages

    grafana

    Summary

    Published
    6 Mar 2024
    BIT-helm-2022-23524
    Fix available
    Packages

    helm

    Summary

    Helm vulnerable to Denial of service through string value parsing

    Published
    6 Mar 2024
    Packages

    jupyter-notebook

    Summary

    Stored cross site scripting in Markdown Preview in JupyterLab

    Published
    6 Mar 2024
    Packages

    elasticsearch

    Summary

    Published
    6 Mar 2024
    Packages

    gitea

    Summary

    Published
    6 Mar 2024
    Packages

    consul

    Summary

    Published
    6 Mar 2024
    Packages

    haproxy

    Summary

    Published
    6 Mar 2024
    Packages

    gitlab

    Summary

    Missing Authorization in GitLab

    Published
    6 Mar 2024
    Packages

    jupyterlab

    Summary

    Potential authentication and CSRF tokens leak in JupyterLab

    Published
    6 Mar 2024
    Packages

    jenkins

    Summary

    Published
    6 Mar 2024
    BIT-discourse-2023-43659
    No fix available
    Packages

    discourse

    Summary

    Cross-site Scripting via email preview when CSP disabled in Discourse

    Published
    6 Mar 2024
    Packages

    ghost

    Summary

    Published
    6 Mar 2024
    Packages

    dotnet-sdk

    Summary

    Microsoft QUIC Denial of Service Vulnerability

    Published
    6 Mar 2024
    Packages

    gradle

    Summary

    Published
    6 Mar 2024
    Packages

    envoy

    Summary

    Envoy may crash when a large request body is processed in Lua filter

    Published
    6 Mar 2024
    Packages

    dotnet

    Summary

    Microsoft QUIC Denial of Service Vulnerability

    Published
    6 Mar 2024
    Packages

    jupyter-base-notebook

    Summary

    Stored cross site scripting in Markdown Preview in JupyterLab

    Published
    6 Mar 2024
    Packages

    aspnet-core

    Summary

    ASP.NET Core Denial of Service Vulnerability

    Published
    6 Mar 2024
    Packages

    jupyterhub

    Summary

    incomplete logout in JupyterHub

    Published
    6 Mar 2024
    Packages

    drupal

    Summary

    Improper Input Validation in guzzlehttp/psr7

    Published
    6 Mar 2024
    Packages

    golang

    Summary

    Memory exhaustion in QUIC connection handling in crypto/tls

    Published
    6 Mar 2024
    Packages

    harbor

    Summary

    Published
    6 Mar 2024
    Packages

    grafana

    Summary

    Published
    6 Mar 2024
    Packages

    guacamole

    Summary

    Published
    6 Mar 2024
    Packages

    django

    Summary

    Published
    6 Mar 2024
    Packages

    airflow

    Summary

    Apache Airflow SMTP Provider, Apache Airflow IMAP Provider, Apache Airflow: SMTP/IMAP client components allowed MITM due to missing Certificate Validation

    Published
    6 Mar 2024
    Packages

    codeigniter

    Summary

    Published
    6 Mar 2024
    Packages

    guacamole-server

    Summary

    Published
    6 Mar 2024
    Packages

    apache

    Summary

    mod_lua Use of uninitialized value of in r:parsebody

    Published
    6 Mar 2024
    Packages

    elasticsearch

    Summary

    Published
    6 Mar 2024
    BIT-helm-2022-23525
    Fix available
    Packages

    helm

    Summary

    Helm vulnerable to Denial of service via NULL Pointer Dereference

    Published
    6 Mar 2024
    Packages

    consul

    Summary

    Published
    6 Mar 2024
    Packages

    gitlab

    Summary

    Missing Authorization in GitLab

    Published
    6 Mar 2024
    Packages

    jenkins

    Summary

    Published
    6 Mar 2024
    Packages

    jupyter-notebook

    Summary

    Potential authentication and CSRF tokens leak in JupyterLab

    Published
    6 Mar 2024
    Packages

    gitea

    Summary

    Published
    6 Mar 2024
    BIT-discourse-2023-43814
    No fix available
    Packages

    discourse

    Summary

    Exposure of poll options and votes to unauthorized users in Discourse

    Published
    6 Mar 2024
    Packages

    gradle

    Summary

    Published
    6 Mar 2024
    Packages

    ghost

    Summary

    Published
    6 Mar 2024
    Packages

    jupyter-base-notebook

    Summary

    Potential authentication and CSRF tokens leak in JupyterLab

    Published
    6 Mar 2024
    Packages

    dotnet-sdk

    Summary

    ASP.NET Core Security Feature Bypass Vulnerability

    Published
    6 Mar 2024
    Packages

    haproxy

    Summary

    Published
    6 Mar 2024
    Packages

    django

    Summary

    Published
    6 Mar 2024
    Packages

    dotnet

    Summary

    ASP.NET Core Security Feature Bypass Vulnerability

    Published
    6 Mar 2024
    Packages

    grafana

    Summary

    Stored XSS in Graphite FunctionDescription tooltip

    Published
    6 Mar 2024
    Packages

    drupal

    Summary

    Published
    6 Mar 2024