Packagist

GHSA-jh5r-qr3c-85q8

Packagist/laravel/framework

Laravel: XSS in Debug Page Information 14 hours ago

Fix available
Severity - 3.1 (Low)

GHSA-cxf4-7mrp-vvpr

Packagist/league/flysystem

Flysystem: WhitespacePathNormalizer's control-character (CorruptedPathDetected) check is bypassed by malformed UTF-8 in the path, affecting every adapter 14 hours ago

Fix available
Severity - 3.5 (Low)

GHSA-r6hr-vr92-vv28

Packagist/phpcsstandards/phpcsutils

PHPCSUtils: Remote code execution via eval() in AbstractArrayDeclarationSniff::getActualArrayKey() 14 hours ago

Fix available
Severity - 8.6 (High)

GHSA-g7vj-c29h-3h5m

Packagist/fof/oauth

FriendsOfFlarum OAuth: Unauthenticated account takeover via unverified email trust in Discord OAuth provider 4 days ago

Fix available
Severity - 9.8 (Critical)

GHSA-v65j-hff3-753c

Packagist/starcitizenwiki/embedvideo

Mediawiki EmbedVideo Extension has stored XSS via malformed src url with $wgEmbedVideoRequireConsent disabled 4 days ago

Fix available
Severity - 7.5 (High)

GHSA-qxg3-46rw-79j8

Packagist/code16/sharp

code16 Sharp vulnerable to stored XSS via iframe srcdoc Attribute 4 days ago

Fix available
Severity - 7.3 (High)

GHSA-vj3q-vp3g-j9c8

Packagist/code16/sharp

code16/sharp has a stored XSS via data-html-content Sanitizer Bypass 4 days ago

Fix available
Severity - 8.7 (High)

GHSA-87mg-5grr-rhwh

Packagist/contao/contao
Packagist/contao/core-bundle

Contao: Server-Side Request Forgery (SSRF) via Unvalidated RSS Feed URL in Feed Reader Module 5 days ago

Fix available
Severity - 3.1 (Low)

GHSA-36h5-qg4p-q2qf

Packagist/zbateson/mail-mime-parser

zbateson/mail-mime-parser has CRLF header injection via attachment filename 5 days ago

Fix available
Severity - 7.2 (High)

GHSA-f6v3-2qmr-vfjx

Packagist/zbateson/mail-mime-parser

zbateson/mail-mime-parser has uncontrolled resource consumption (CPU/memory DoS) parsing untrusted MIME 5 days ago

Fix available
Severity - 7.5 (High)

GHSA-rw77-vq4g-x3hp

Packagist/phpmyfaq/phpmyfaq
Packagist/thorsten/phpmyfaq

phpMyFAQ has SQL Injection in `StopWords::add()` — Unescaped Stop Word Insertion 5 days ago

Fix available
Severity - 8.5 (High)

GHSA-8gpw-xvpf-hvx5

Packagist/phpmyfaq/phpmyfaq
Packagist/thorsten/phpmyfaq

phpMyFAQ's two-factor authentication login bypasses the password factor 5 days ago

Fix available
Severity - 8.1 (High)

GHSA-pgwp-vc7q-cvj3

Packagist/phpmyfaq/phpmyfaq
Packagist/thorsten/phpmyfaq

phpMyFAQ has Stored XSS in Admin FAQ Editor via HTML Entity Bypass in Frontend FAQ Submission 5 days ago

Fix available
Severity - 8.2 (High)

GHSA-396x-xmvh-p563

Packagist/snipe/snipe-it

Snipe-IT: Stored XSS via Inline XML Rendering in the Uploaded Files API 5 days ago

Fix available
Severity - 8.7 (High)

GHSA-p9h3-gvpq-5539

Packagist/snipe/snipe-it

Snipe-IT: Stored XSS via Custom Field name in asset-list column headers 5 days ago

Fix available
Severity - 8.1 (High)

GHSA-hxcx-9h4f-42xx

Packagist/snipe/snipe-it

Snipe-IT: 2FA bypass via the API token flow 5 days ago

Fix available
Severity - 8.6 (High)

Vulnerabilities