Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    GHSA-4hv7-3q38-97m8
    Fix available
    Packages

    djv

    Summary

    Arbitrary code execution in djv

    Published
    13 Apr 2021
    GHSA-rhwf-hqpr-q8g2
    Fix available
    Packages

    script-manager

    Summary

    Code Injection in script-manager

    Published
    13 Apr 2021
    GHSA-8h84-8j4f-p97q
    Fix available
    Packages

    bodymen

    Summary

    Injection in bodymen

    Published
    13 Apr 2021
    GHSA-4jj4-m52p-8rx3
    Fix available
    Packages

    set-object-value

    Summary

    Prototype pollution in set-object-value

    Published
    13 Apr 2021
    GHSA-g78f-549w-c354
    Fix available
    Packages

    multi-ini

    Summary

    Prototype Pollution in multi-ini

    Published
    13 Apr 2021
    USN-4907-1
    Fix available
    Packages

    linux-azure, linux-aws-hwe, linux-azure, linux-gcp, linux-oracle, linux, linux-aws, linux-azure-4.15, linux-dell300x, linux-gcp-4.15, linux-kvm, linux-oracle, linux-raspi2, linux-snapdragon

    Summary

    linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-4.15, linux-dell300x, linux-gcp, linux-gcp-4.15, linux-kvm, linux-oracle, linux-raspi2, linux-snapdragon vulnerabilities

    Published
    13 Apr 2021
    GHSA-67mq-h2r9-rh2m
    Fix available
    Packages

    multi-ini

    Summary

    Prototype pollution in multi-ini

    Published
    13 Apr 2021
    GHSA-vf26-7gjf-f92r
    No fix available
    Packages

    rpi

    Summary

    OS Command Injection in rpi

    Published
    13 Apr 2021
    GHSA-prv2-xwr7-hr57
    No fix available
    Packages

    rdf-graph-array

    Summary

    Uncontrolled Resource Consumption in rdf-graph-array

    Published
    13 Apr 2021
    GHSA-79qm-h35f-hr77
    Fix available
    Packages

    compile-sass

    Summary

    OS Command Injection in compile-sass

    Published
    13 Apr 2021
    GHSA-h73g-8g27-xxcx
    No fix available
    Packages

    corenlp-js-prefab

    Summary

    Command injection in corenlp-js-prefab

    Published
    13 Apr 2021
    GHSA-hmw2-mvvh-jf5j
    No fix available
    Packages

    enpeem

    Summary

    OS Command Injection in enpeem

    Published
    13 Apr 2021
    GHSA-7mpx-vg3c-cmr4
    Fix available
    Packages

    react-adal

    Summary

    Improper Authentication in react-adal

    Published
    13 Apr 2021
    GHSA-3fw4-4h3m-892h
    No fix available
    Packages

    serial-number

    Summary

    OS Command Injection in serial-number

    Published
    13 Apr 2021
    GHSA-53xj-v576-3ch2
    No fix available
    Packages

    giting

    Summary

    OS Command Injection in giting

    Published
    13 Apr 2021
    GHSA-pmpr-vc5q-h3jw
    No fix available
    Packages

    valib

    Summary

    Exposure of Resource to Wrong Sphere in valib

    Published
    13 Apr 2021
    GHSA-2548-q746-x5x6
    No fix available
    Packages

    port-killer

    Summary

    Code injection in port-killer

    Published
    13 Apr 2021
    GHSA-j32x-j8pj-pg2h
    No fix available
    Packages

    decal

    Summary

    Prototype Pollution in decal

    Published
    13 Apr 2021
    GHSA-vp77-fqqp-79j8
    No fix available
    Packages

    decal

    Summary

    Prototype Pollution in decal

    Published
    13 Apr 2021
    GHSA-7h8x-wmq2-7mff
    No fix available
    Packages

    launchpad

    Summary

    Command injection in launchpad

    Published
    13 Apr 2021
    GHSA-2f6g-w5gj-c93h
    No fix available
    Packages

    iniparserjs

    Summary

    Prototype Pollution in iniparserjs

    Published
    13 Apr 2021
    GHSA-9mrv-456v-pf22
    Fix available
    Packages

    vis-timeline

    Summary

    Cross-site Scripting in vis-timeline

    Published
    13 Apr 2021
    GHSA-jxg6-fhwc-9v9c
    Fix available
    Packages

    es6-crawler-detect

    Summary

    Regular Expression Denial of Service (ReDoS) in es6-crawler-detect

    Published
    13 Apr 2021
    GHSA-8695-fr6h-9fq8
    No fix available
    Packages

    nuance-gulp-build-common

    Summary

    Command Injection in nuance-gulp-build-common

    Published
    13 Apr 2021
    GHSA-45w5-pvr8-4rh5
    No fix available
    Packages

    eslint-fixer

    Summary

    Command injection in eslint-fixer

    Published
    13 Apr 2021
    GHSA-cwg9-c9cr-p5fq
    Fix available
    Packages

    @theia/console

    Summary

    Improper Neutralization of Input in Theia console

    Published
    13 Apr 2021
    GHSA-43ch-2h55-2vj7
    Fix available
    Packages

    private-ip

    Summary

    Server-Side Request Forgery in private-ip

    Published
    13 Apr 2021
    GHSA-gcm9-cc3r-c6vj
    Fix available
    Packages

    @theia/preview

    Summary

    Cross-site Scripting (XSS) in Eclipse Theia

    Published
    13 Apr 2021
    GHSA-f7vx-j8mp-3h2x
    Fix available
    Packages

    @theia/mini-browser

    Summary

    Insufficient Verification of Data Authenticity in Eclipse Theia

    Published
    13 Apr 2021
    GHSA-whq6-mj2r-mjqc
    No fix available
    Packages

    lsof

    Summary

    OS Command Injection in lsof

    Published
    13 Apr 2021
    GHSA-ph32-23p8-9rw5
    No fix available
    Packages

    network-manager

    Summary

    Improper Input Validation in network-manager

    Published
    13 Apr 2021
    GHSA-qfxv-qqvg-24pg
    No fix available
    Packages

    im-metadata

    Summary

    OS Command Injection in im-metadata

    Published
    13 Apr 2021
    GHSA-r9vm-rhmf-7hxx
    No fix available
    Packages

    im-resize

    Summary

    OS Command Injection in im-resize

    Published
    13 Apr 2021
    GHSA-fc42-h7q4-qp8h
    Fix available
    Packages

    killport

    Summary

    Command Injection in killport

    Published
    13 Apr 2021
    GHSA-4gfq-6m28-m5mg
    No fix available
    Packages

    freediskspace

    Summary

    Improper neutralization of arguments in freediskspace

    Published
    13 Apr 2021
    GHSA-6q4w-3wp4-q5wf
    Fix available
    Packages

    get-ip-range

    Summary

    Denial of Service in get-ip-range

    Published
    13 Apr 2021
    GHSA-67mm-m3wx-j7fr
    Fix available
    Packages

    gitlog

    Summary

    Command injection in gitlog

    Published
    13 Apr 2021
    CVE-2020-27236
    No fix available
    Packages

    Summary

    Published
    13 Apr 2021
    CVE-2020-27235
    No fix available
    Packages

    Summary

    Published
    13 Apr 2021
    CVE-2020-27234
    No fix available
    Packages

    Summary

    Published
    13 Apr 2021
    CVE-2020-27233
    No fix available
    Packages

    Summary

    Published
    13 Apr 2021
    CVE-2020-27228
    No fix available
    Packages

    Summary

    Published
    13 Apr 2021
    CVE-2020-27227
    No fix available
    Packages

    Summary

    Published
    13 Apr 2021
    CVE-2020-13568
    No fix available
    Packages

    Summary

    Published
    13 Apr 2021
    CVE-2020-13566
    No fix available
    Packages

    Summary

    Published
    13 Apr 2021
    UBUNTU-CVE-2020-13568
    No fix available
    Packages

    phpgacl

    Summary

    Published
    13 Apr 2021
    UBUNTU-CVE-2020-13566
    No fix available
    Packages

    phpgacl

    Summary

    Published
    13 Apr 2021
    GHSA-88rc-3p98-rgvx
    Fix available
    Packages

    shopware/platform, shopware/core

    Summary

    After order payment process manipulation in shopware/platform and shopware/core

    Published
    13 Apr 2021
    GHSA-3pcr-4982-548m
    Fix available
    Packages

    shopware/production, shopware/shopware

    Summary

    Exposure of .env if project root is configured as web root in shopware/production

    Published
    13 Apr 2021
    GHSA-qg7c-q3vq-rgxr
    Fix available
    Packages

    shopware/core, shopware/platform

    Summary

    Leak of information via Store-API aggregations in shopware/platform and shopware/core

    Published
    13 Apr 2021