OSV - Open Source Vulnerabilities

GHSA-w34w-fvp3-68xm

Packagist/yeswiki/yeswiki

Yeswiki Path Traversal vulnerability allows arbitrary read of files

yesterday

Fix available
Severity - 8.6 (High)

GHSA-39g6-x4x8-5jcm

Packagist/drupal/core

Drupal Core Potential Cross-Site Scripting (XSS) via Error Messages

2 days ago

Fix available
Severity - 6.1 (Medium)

GHSA-4f8q-mwgc-3mwc

Packagist/drupal/oauth2_server

Drupal OAuth2 Server Missing Authorization vulnerability

2 days ago

Fix available
Severity - 2.7 (Low)

GHSA-5r66-vgc7-2mm3

Packagist/drupal/formatter_suite

Drupal Formatter Suite Vulnerable to Cross-Site Scripting (XSS) via Link Element Attributes

2 days ago

Fix available
Severity - 1.2 (Low)

GHSA-86h4-w859-3hhv

Packagist/drupal/rapidoc_elements_field_formatter

Drupal RapiDoc OAS Field Formatter Cross-Site Scripting (XSS) vulnerability

2 days ago

Fix available
Severity - 1.2 (Low)

GHSA-hf6c-fgp3-jfch

Packagist/drupal/tfa

Drupal Two-factor Authentication (TFA) Vulnerable to Forceful Browsing

2 days ago

Fix available
Severity - 1.7 (Low)

GHSA-p2wg-8h29-874v

Packagist/drupal/link_field_display_mode_formatter

Drupal Link field display mode formatter Cross-Site Scripting (XSS) vulnerability

2 days ago

Fix available
Severity - 1.2 (Low)

GHSA-pwjq-fx3v-8f9r

Packagist/drupal/ai

Drupal AI Vulnerable to OS Command Injection via Optional Automator Types

2 days ago

Fix available
Severity - 4.9 (Medium)

GHSA-36vv-q5jv-94cj

Packagist/drupal/google_tag

Drupal Google Tag Cross-Site Scripting (XSS) vulnerability

2 days ago

Fix available
Severity - 4.8 (Medium)

GHSA-6chf-hhqf-749c

Packagist/drupal/oauth2_client

Drupal OAuth2 Client Cross-Site Request Forgery (CSRF)

2 days ago

Fix available
Severity - 1.7 (Low)

GHSA-8r2q-865v-wm8j

Packagist/drupal/spamspan

Drupal SpamSpan Cross-Site Scripting (XSS) vulnerability

2 days ago

Fix available
Severity - 2.1 (Low)

GHSA-ccc9-jgj7-hxc7

Packagist/drupal/cache_utility

Drupal Cache Utility Cross-Site Request Forgery (CSRF) vulnerability

2 days ago

Fix available
Severity - 2.7 (Low)

GHSA-gf72-h4cp-wcm4

Packagist/goalgorilla/open_social

Drupal Open Social Missing Authorization vulnerability

2 days ago

Fix available
Severity - 2.7 (Low)

GHSA-jh66-rjx8-8qqc

Packagist/drupal/matomo

Drupal Matomo Analytics Cross-Site Request Forgery (CSRF) vulnerability

2 days ago

Fix available
Severity - 1.7 (Low)

GHSA-jv6r-mj9p-9xff

Packagist/drupal/gdpr

Drupal General Data Protection Regulation Cross-Site Request Forgery (CSRF) vulnerability

2 days ago

Fix available
Severity - 2.7 (Low)

GHSA-jwpx-6c4p-q4jq

Packagist/drupal/alogin

Drupal Authenticator Login Missing Authorization vulnerability

2 days ago

Fix available
Severity - 6.7 (Medium)