Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-pmhh-3w7g-xqp8
  • Maven/org.jsoup:jsoup
 jsoup: Cleaner may expose markup with custom raw-text elements 18 hours ago
  • Fix available
  • Severity - 4.7 (Medium)
GHSA-pjp7-q6wp-97qx
  • Maven/org.geonetwork-opensource:geonetwork
 core-geonetwork has an Open Redirect Bypass 6 days ago
  • Fix available
  • Severity - 4.8 (Medium)
GHSA-93wv-jw9v-4972
  • Maven/io.netty:netty-codec-http2
 Netty: HTTP/2 decompression leaks ByteBuf reference count when the decompressor channel is already closed (Direct memory leak / OOM DoS) 6 days ago
  • Fix available
  • Severity - 7.5 (High)
GHSA-88fw-v6x4-3f58
  • Maven/org.springframework.data:spring-data-commons
 Spring Data: Unbounded property-path cache keyed by externally-supplied path string 6 days ago
  • Fix available
  • Severity - 7.5 (High)
GHSA-rwqx-fvqh-6wm4
  • Maven/io.opentelemetry.javaagent:opentelemetry-javaagent
 OpenTelemetry Java Instrumentation: JDBC Auto-Instrumentation Logging Clear-Text Passwords 29 Jul
  • Fix available
  • Severity - 6.5 (Medium)
GHSA-fq3f-m5qm-99f5
  • Maven/io.opentelemetry.javaagent:opentelemetry-javaagent
 OpenTelemetry Javaagent RMI context propagation allows resource exhaustion 29 Jul
  • Fix available
  • Severity - 5.3 (Medium)
GHSA-qcxp-gm7m-4j5v
  • Maven/io.quarkus:quarkus-vertx-http
 Quarkus: Authentication/Authorization Bypass via Advanced Path Normalization Vulnerabilities 29 Jul
  • Fix available
  • Severity - 7.5 (High)
GHSA-7c26-995w-6f47
  • Maven/org.verapdf:parser
 veraPDF Parser DoS via PostScript Type 1 Font Programs 29 Jul
  • Fix available
  • Severity - 6.9 (Medium)
GHSA-jrmc-qg6p-94fp
  • Maven/org.verapdf:parser
 veraPDF Parser DoS via PostScript CMap Streams 29 Jul
  • Fix available
  • Severity - 6.9 (Medium)
GHSA-cg9x-g3gm-h5h6
  • Maven/org.verapdf:validation-model
  • Maven/org.verapdf:validation-model-jakarta
 veraPDF-validatio: Use of Default `DocumentBuilderFactory` leads to XXE When Processing Untrusted PDFs 29 Jul
  • Fix available
  • Severity - 6.5 (Medium)
GHSA-3jh7-wm29-q568
  • Maven/org.verapdf:validation-model
  • Maven/org.verapdf:validation-model-jakarta
 veraPDF Validation XXE via Rich Text 29 Jul
  • Fix available
  • Severity - 8.7 (High)
GHSA-36mm-w85j-3q2j
  • Maven/org.verapdf:validation-model
  • Maven/org.verapdf:validation-model-jakarta
 veraPDF Validation XXE via XFA 29 Jul
  • Fix available
  • Severity - 8.7 (High)
GHSA-85rg-p3fr-xc2f
  • Maven/com.quietterminal:qti-neon
  • PyPI/qti-neon
  • npm/qti-neon
 QTINeon has unauthenticated relay-to-host amplification via unbounded RECONNECT_REQUEST forwarding 28 Jul
  • No fix available
  • Severity - 8.6 (High)
GHSA-4r9r-4425-74p7
  • Maven/com.cedarpolicy:cedar-java
 Cedar-Java has policy injection, type confusion, and incorrect equality comparison vulnerabilities 28 Jul
  • Fix available
  • Severity - 8.8 (High)
GHSA-28f5-38xr-jh2w
  • Maven/io.appium:java-client
 java-client Allows Network Pivot via Unvalidated directConnect Redirect in AppiumCommandExecutor 28 Jul
  • Fix available
  • Severity - 8.2 (High)
GHSA-4j38-rw27-97gx
  • Maven/org.xwiki.contrib:discussions-server
 org.xwiki.contrib:discussions-server has Cross-Site Request Forgery (CSRF) issue that makes it possible to delete messages 27 Jul
  • Fix available
  • Severity - 6.5 (Medium)
Load more...