Open Source Vulnerabilities

showdoc/showdoc

showdoc is vulnerable to Cross-Site Request Forgery (CSRF)

rusqlite, rusqlite

Use After Free in rusqlite

rusqlite, rusqlite

Use After Free in rusqlite

rusqlite, rusqlite

Use After Free in rusqlite

rusqlite, rusqlite

Use After Free in rusqlite

archivy

archivy is vulnerable to Cross-Site Request Forgery (CSRF)

js-data

Prototype Pollution in js-data

hillelcoren/invoice-ninja

invoiceninja is vulnerable to Cross-site Scripting

parse-link-header

Uncontrolled Resource Consumption in parse-link-header

github.com/kataras/iris/v12, github.com/kataras/iris

Link Following in Iris

elgg/elgg

elgg is vulnerable to Cross-site Scripting

org.apache.solr:solr-parent

Apache Solr Improper Input Validation and Path Traversal

gpac

gpac

gpac, gpac, gpac, gpac, gpac, gpac

gpac, gpac, gpac, gpac, gpac, gpac

github.com/containers/podman/v3

Exposure of Sensitive Information to an Unauthorized Actor and Origin Validation Error in podman

unisharp/laravel-filemanager

Unrestricted Upload of File with Dangerous Type in unisharp/laravel-filemanager

latte/latte

Incorrect Authorization in latte/latte

is-my-json-valid, is-my-json-valid

Regular expression deinal of service (ReDoS) in is-my-json-valid

braces

Regular Expression Denial of Service (ReDoS) in braces

org.apache.nifi:nifi

Inadequate Encryption Strength in Apache NiFi

org.apache.nifi:nifi

Missing Authentication for Critical Function in Apache NiFi

org.apache.nifi:nifi-stateless

Insertion of Sensitive Information into Log File in Apache NiFi Stateless

org.apache.nifi:nifi

Improper Restriction of XML External Entity Reference in Apache NiFi

org.apache.nifi:nifi-framework-core, org.apache.nifi:nifi-security-utils

Insertion of Sensitive Information into Log File in Apache NiFi

org.apache.nifi:nifi-parameter

Apache NiFi Insertion of Sensitive Information into Log File

org.apache.xmlgraphics:batik-svgbrowser

Server-side request forgery (SSRF) in Apache Batik

org.apache.nifi:nifi

Cross-site scripting in Apache NiFi

org.apache.ambari:ambari

Cross-site Scripting (XSS) in Apache Ambari Views

copy-props

Prototype Pollution in copy-props

org.apache.guacamole:guacamole-common-js, org.apache.guacamole:guacamole-common

Incorrect Default Permissions in Apache Guacamole

org.apache.velocity:velocity-engine-parent, org.apache.velocity:velocity

Sandbox Bypass in Apache Velocity Engine

stringstream

Out-of-Bounds read in stringstream

lodash, lodash-es, lodash.trimend, lodash.trim, lodash-rails

Regular Expression Denial of Service (ReDoS) in lodash

url-parse

Improper Validation and Sanitization in url-parse

http-proxy-agent

Resource Exhaustion Denial of Service in http-proxy-agent

com.softwaremill.akka-http-session:core_2.12

Cross-Site Request Forgery in com.softwaremill.akka-http-session:core_2.12

gpac

gpac

gpac

gpac

gpac, gpac, gpac, gpac, gpac, gpac