Open Source Vulnerabilities
ID
Packages
Summary
Published
Attributes
GHSA-gw7g-qr8w-3448
Fix available
Packages
remarshal
Summary
Remarshal expands YAML alias nodes unlimitedly, hence Remarshal is vulnerable to Billion Laughs Attack
Published
13 Nov 2023remarshal
Remarshal expands YAML alias nodes unlimitedly, hence Remarshal is vulnerable to Billion Laughs Attack
13 Nov 2023
Fix available
CVE-2023-23684
No fix available
Packages
Summary
WordPress WPGraphQL Plugin <= 1.14.5 is vulnerable to Server Side Request Forgery (SSRF)
Published
13 Nov 2023WordPress WPGraphQL Plugin <= 1.14.5 is vulnerable to Server Side Request Forgery (SSRF)
13 Nov 2023
No fix available
CVE-2023-46636
No fix available
Packages
Summary
WordPress Custom Header Images Plugin <= 1.2.1 is vulnerable to Cross Site Request Forgery (CSRF)
Published
13 Nov 2023WordPress Custom Header Images Plugin <= 1.2.1 is vulnerable to Cross Site Request Forgery (CSRF)
13 Nov 2023
No fix available
