Open Source Vulnerabilities

@grafana/data

XSS vulnerability allowing arbitrary JavaScript execution

nbdime, nbdime, nbdime, nbdime, nbdime, nbdime-jupyterlab, nbdime-jupyterlab

Stored XSS in Jupyter nbdime

apollo-server, apollo-server

Cross-site Scripting Vulnerability in GraphQL Playground (distributed by Apollo Server)

graphql-playground-react

XSS vulnerability in GraphQL Playground from untrusted schemas

graphiql

GraphiQL introspection schema template injection attack

jupyterhub

incomplete JupyterHub logout with simultaneous JupyterLab sessions

coreos-installer

coreos-installer < 0.10.0 writes world-readable Ignition config to installed system

librenms/librenms

Cross-site Scripting in LibreNMS

dotty

Prototype Pollution in dotty