Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    GHSA-w8cj-mvf9-mpc9
    Fix available
    Packages

    bolt/bolt

    Summary

    OS Command injection in Bolt

    Published
    6 May 2021
    GHSA-pvgf-mrr4-cw7r
    Fix available
    Packages

    forkcms/forkcms

    Summary

    Cross-Site Request Forgery in ForkCMS

    Published
    6 May 2021
    GHSA-h59f-p56g-g75v
    Fix available
    Packages

    librenms/librenms

    Summary

    SQL Injection in librenms

    Published
    6 May 2021
    GHSA-g57j-q48p-9vm2
    Fix available
    Packages

    gerapy

    Summary

    Command injection in Gerapy

    Published
    6 May 2021
    GHSA-3vcg-8p79-jpcv
    Fix available
    Packages

    svglib

    Summary

    SVGlib Vulnerable to XXE Attacks

    Published
    6 May 2021
    GHSA-xc3p-ff3m-f46v
    Fix available
    Packages

    flask-cors

    Summary

    Flask-Cors Directory Traversal vulnerability

    Published
    6 May 2021
    GHSA-q4h8-7qff-gh6c
    Fix available
    Packages

    ghost

    Summary

    Server-side request forgery in Ghost CMS

    Published
    6 May 2021
    GHSA-7vm7-j8p7-h346
    Fix available
    Packages

    blamer

    Summary

    Code injection in blamer

    Published
    6 May 2021
    GHSA-6xv6-jpvw-cx6q
    Fix available
    Packages

    bestzip

    Summary

    Command injection in bestzip

    Published
    6 May 2021
    GHSA-m5pj-vjjf-4m3h
    Fix available
    Packages

    grunt

    Summary

    Arbitrary Code Execution in grunt

    Published
    6 May 2021
    GHSA-jpq3-xf27-5jf2
    No fix available
    Packages

    safe-object2

    Summary

    Prototype Pollution in safe-object2

    Published
    6 May 2021
    GHSA-9829-jj5p-j6hf
    No fix available
    Packages

    worksmith

    Summary

    Prototype Pollution in worksmith

    Published
    6 May 2021
    GHSA-p6jh-p7q8-pcrg
    Fix available
    Packages

    nodee-utils

    Summary

    Prototype Pollution in nodee-utils

    Published
    6 May 2021
    GHSA-pgmg-gf5p-54j8
    No fix available
    Packages

    gammautils

    Summary

    Prototype Pollution in gammautils

    Published
    6 May 2021
    GHSA-rj5f-7c8x-gjg4
    No fix available
    Packages

    promisehelpers

    Summary

    Prototype Pollution in promisehelpers

    Published
    6 May 2021
    GHSA-g4xj-wcq6-qwx5
    No fix available
    Packages

    mock2easy

    Summary

    Code injection in mock2easy

    Published
    6 May 2021
    CVE-2020-18890
    No fix available
    Packages

    Summary

    Published
    6 May 2021
    CVE-2020-18888
    No fix available
    Packages

    Summary

    Published
    6 May 2021
    GHSA-85cp-p426-42f5
    Fix available
    Packages

    deep-get-set

    Summary

    Prototype Pollution in deep-get-set

    Published
    6 May 2021
    GHSA-jh2m-j8pp-55rc
    No fix available
    Packages

    gedi

    Summary

    Prototype Pollution in gedi

    Published
    6 May 2021
    GHSA-j4rw-x3vg-c8r7
    No fix available
    Packages

    node-oojs

    Summary

    Prototype Pollution in node-oojs

    Published
    6 May 2021
    GHSA-f98m-q3hr-p5wq
    Fix available
    Packages

    locutus

    Summary

    Prototype Pollution in locutus

    Published
    6 May 2021
    GHSA-fmrr-mx6j-h3h5
    No fix available
    Packages

    confucious

    Summary

    Prototype Pollution in confucious

    Published
    6 May 2021
    GHSA-qr4m-jcvc-3382
    No fix available
    Packages

    dot-notes

    Summary

    Prototype Pollution in dot-notes

    Published
    6 May 2021
    GHSA-rgfv-v3jh-7ffp
    No fix available
    Packages

    deeps

    Summary

    Prototype Pollution in deeps

    Published
    6 May 2021
    GHSA-w8f3-pvx4-4c3h
    No fix available
    Packages

    arr-flatten-unflatten

    Summary

    Prototype Pollution in arr-flatten-unflatten

    Published
    6 May 2021
    GHSA-3c6g-pvg8-gqw2
    Fix available
    Packages

    json, org.webjars.npm:json

    Summary

    trentm/json vulnerable to command injection

    Published
    6 May 2021
    GHSA-gh78-48h3-frjq
    Fix available
    Packages

    aedes

    Summary

    Improper exception handling in Aedes

    Published
    6 May 2021
    GHSA-6fw4-hr69-g3rv
    Fix available
    Packages

    property-expr

    Summary

    Prototype Pollution in property-expr

    Published
    6 May 2021
    GHSA-8vv3-jxm8-f4vf
    Fix available
    Packages

    connie-lang

    Summary

    Prototype Pollution in connie-lang

    Published
    6 May 2021
    GHSA-j7cg-h9v9-6vqp
    Fix available
    Packages

    irrelon-path, @irrelon/path

    Summary

    Prototype Pollution in irrelon-path and @irrelon/path

    Published
    6 May 2021
    GHSA-c7m7-4257-h698
    No fix available
    Packages

    templ8

    Summary

    Prototype Pollution in templ8

    Published
    6 May 2021
    GHSA-gr58-j5wh-m333
    No fix available
    Packages

    nis-utils

    Summary

    Prototype Pollution in nis-utils

    Published
    6 May 2021
    GHSA-jvf5-q4h5-2jmj
    Fix available
    Packages

    madlib-object-utils

    Summary

    Prototype Pollution in madlib-object-utils

    Published
    6 May 2021
    GHSA-m428-jqc4-2p5j
    No fix available
    Packages

    phpjs

    Summary

    Prototype Pollution in phpjs

    Published
    6 May 2021
    GHSA-p9f8-gqjf-m75j
    Fix available
    Packages

    fastify-multipart

    Summary

    Uncontrolled Resource Consumption in fastify-multipart

    Published
    6 May 2021
    GHSA-p7j5-4mwm-hv86
    Fix available
    Packages

    tinymce, tinymce

    Summary

    Duplicate Advisory: Cross-site scripting in TinyMCE

    Published
    6 May 2021
    GHSA-vh6r-g38f-q3w8
    Fix available
    Packages

    jpv

    Summary

    Validation bypass in jpv

    Published
    6 May 2021
    CVE-2021-31918
    No fix available
    Packages

    Summary

    Published
    6 May 2021
    DEBIAN-CVE-2021-31916
    Fix available
    Packages

    linux, linux, linux

    Summary

    Published
    6 May 2021
    CVE-2021-31916
    No fix available
    Packages

    Summary

    Published
    6 May 2021
    CVE-2021-31793
    No fix available
    Packages

    Summary

    Published
    6 May 2021
    AZL-6558
    Fix available
    Packages

    kernel

    Summary

    CVE-2021-31916 affecting package kernel for versions less than 5.10.78.1-1

    Published
    6 May 2021
    CVE-2020-18889
    No fix available
    Packages

    Summary

    Published
    6 May 2021
    CVE-2019-25043
    Fix available
    Packages

    ,

    Summary

    Published
    6 May 2021
    DEBIAN-CVE-2019-25043
    Fix available
    Packages

    modsecurity, modsecurity, modsecurity

    Summary

    Published
    6 May 2021
    UBUNTU-CVE-2019-25043
    No fix available
    Packages

    modsecurity, modsecurity, modsecurity, modsecurity, modsecurity

    Summary

    Published
    6 May 2021
    DEBIAN-CVE-2021-3507
    Fix available
    Packages

    qemu, qemu, qemu

    Summary

    Published
    6 May 2021
    CVE-2021-3507
    No fix available
    Packages

    ,

    Summary

    Published
    6 May 2021
    DEBIAN-CVE-2021-32052
    Fix available
    Packages

    python-django, python-django, python-django

    Summary

    Published
    6 May 2021