Vulnerability Database - OSV

CGA-qjff-53mh-wmx6

Chainguard/langfuse-fips-4

See record for full details 54 minutes ago

No fix available
Severity - 9.1 (Critical)

GHSA-r3g7-r4hr-m258

npm/obsidian-tc

obsidian-tc: Memory-lifecycle tools overwrite unowned notes or partially commit... 1 hour ago

Fix available
Severity - 7.1 (High)

GHSA-rpx2-p6hp-x5gj

Go/github.com/siyuan-note/siyuan/kernel

SiYuan: Missing consistency check between packageName and repoURL/repoHash in... 1 hour ago

Fix available
Severity - 6.6 (Medium)

CGA-8gvm-7jhc-q25q

Chainguard/ruby-3.3-doc
Wolfi/ruby-3.3-doc

See record for full details 1 hour ago

Fix available

CGA-jrm2-w882-qmjh

Chainguard/ruby-3.3-doc
Wolfi/ruby-3.3-doc

See record for full details 1 hour ago

Fix available

CGA-247c-h67h-2r6r

Chainguard/ruby-3.3-dev
Wolfi/ruby-3.3-dev

See record for full details 1 hour ago

Fix available

CGA-xpmp-pw2x-ggcx

Chainguard/ruby-3.3-dev
Wolfi/ruby-3.3-dev

See record for full details 1 hour ago

Fix available

CGA-8wc2-vw43-vm72

Chainguard/ruby-3.3
Wolfi/ruby-3.3

See record for full details 1 hour ago

Fix available

CGA-wvp4-hx55-xgj7

Chainguard/ruby-3.3
Wolfi/ruby-3.3

See record for full details 1 hour ago

Fix available

CGA-gwrm-qw2v-j5wp

Chainguard/langfuse-fips-4-worker

See record for full details 1 hour ago

No fix available
Severity - 9.1 (Critical)

GHSA-c8w8-3pqp-wr83

Go/github.com/siyuan-note/siyuan/kernel

SiYuan: A parser differential between the WebSocket keepalive exemption and the... 1 hour ago

Fix available
Severity - 7.5 (High)

GHSA-4pjg-x8qj-33j5

Go/github.com/siyuan-note/siyuan/kernel

SiYuan: authFilePublishAccess distinguishes hidden and forbidden documents from... 1 hour ago

Fix available
Severity - 5.8 (Medium)

GHSA-p4qw-vx5p-g984

Go/github.com/siyuan-note/siyuan/kernel

SiYuan: The publish filter for database backlinks consults the forbidden list... 1 hour ago

Fix available
Severity - 5.8 (Medium)

GHSA-xp3q-r38w-vgqm

Go/github.com/siyuan-note/siyuan/kernel

SiYuan: The publish filter for local storage returns the administrator's entire... 1 hour ago

Fix available
Severity - 5.8 (Medium)

GHSA-pqh8-4pj7-32xx

npm/obsidian-tc

obsidian-tc HTTP transport lacks Origin/DNS-rebinding protection, enabling... 1 hour ago

Fix available
Severity - 9.6 (Critical)

GHSA-43r2-c7g8-prc8

npm/obsidian-tc

obsidian-tc Bridge tools leak denied-note data via unfiltered sibling fields 1 hour ago

Fix available
Severity - 4.3 (Medium)