GitHub Security Advisories

Memory overflow in RTSP ALG can lead to unpredictable or erroneous behavior or Denial of Service...

split_image_check() in boot/bootutil/src/loader.c declares a fixed uint8_t loader_hash[32] buffer...

Multiple Memory overflow vulnerabilities can lead to unpredictable or erroneous behavior and...

A flaw has been found in Cairo-dock Glx-Dock 3.4.0. The affected element is an unknown function...

Software installed and run as a non-privileged user may conduct GPU system calls to trigger an...

Memory overflow in WebAuth authentication can lead to unpredictable or erroneous behavior or...

A vulnerability was identified in Zackriya-Solutions Meetily up to 0.4.1. Affected is an unknown...

boot_save_boot_status() in boot/bootutil/src/boot_record.c reads the image's EXPECTED_HASH_TLV...

Software installed and run as a non-privileged user may conduct improper GPU system calls to the...

MCUboot's Zephyr serial-recovery upload handler bs_upload() in boot/boot_serial/src/boot_serial.c...

Memory overflow in SAML authentication can lead to unpredictable or erroneous behavior or Denial...

A vulnerability was found in lanyulei ferry 1.0.0-beta.1/1.0.0. Affected is an unknown function...

A security flaw has been discovered in SourceCodester Food Ordering System 1.0. This affects an...

A vulnerability was detected in AIP-PUB ACPs-community up to 2.2.0. This impacts an unknown...

A weakness has been identified in AIP-PUB ACPs-community up to 2.2.0. The impacted element is the...

A vulnerability was identified in SourceCodester Food Ordering System 1.0. Affected by this issue...

A vulnerability was determined in SourceCodester Smart Attendance System with QR Code Scanner 1.0...

Software installed and run as a non-privileged user may conduct improper GPU system calls through...

Tight JPEG decoding in TightVNC and UltraVNC viewers contains a heap-based buffer overflow...

MCUboot's serial-recovery image-upload handler bs_upload() in boot/boot_serial/src/boot_serial.c...

A security flaw has been discovered in Linksys EA8100 1.0.3.216940. The affected element is an...

Memory overflow in NetScaler Push can lead to unpredictable or erroneous behavior or Denial of...

A vulnerability was identified in Linksys EA8100 1.0.3.216940. Impacted is an unknown function of...

Memory corruption in DNS-over-HTTPS (DoH) can lead to unpredictable or erroneous behavior or a...

Memory corruption in DNS / DNS-over-HTTPS (DoH) can lead to unpredictable or erroneous behavior...

Memory overflow in SMPP traffic can lead to unpredictable or erroneous behavior or Denial of...

Rucio: Unauthenticated administrator impersonation through SSH challenge tokens

Soup Sieve: Polynomial-time denial of service in the descendant combinator

Soup Sieve: General sibling combinator inside :has() matches untrusted HTML in quadratic time

Vault Community Edition and Vault Enterprise did not consistently apply explicit ACL policy deny...

Vault's audit devices did not validate the contents of a configured audit log prefix and did not...

A vulnerability was determined in Linksys EA8100 1.0.3.216940. This issue affects the function...

Dokploy before 0.31.1 contains a missing ownership check vulnerability in the readAppMonitoring...

A memory-safety flaw in the key-management request-building component of the library can lead to...

A type allow-list bypass in the BSON serialization library of the MongoDB C# Driver allows a type...

A vulnerability has been found in Linksys EA8100 1.0.3.216940. This affects the function...

A deserialization type-restriction control in the BSON serialization component can be bypassed...

A vulnerability was found in Linksys EA8100 1.0.3.216940. This vulnerability affects unknown code...

HashiCorp Vault and Vault Enterprise are vulnerable to an issue in the integrated storage join...

A local user with an ordinary account on the same host can place a file in a shared temporary...

Memory overflow in Packet Processing can lead to unpredictable or erroneous behavior or Denial of...

Xiaomi Mi Browser Android Application (com.mi.globalbrowser) before 14.66.0-gn contains a path...

A vulnerability in the default configuration of vsomeip allows a remote, unauthenticated attacker...

MultiVendorX plugin for WordPress before 5.0.22 contains a broken access control vulnerability in...

Active Storage: Possible arbitrary file write and read in image analysis

Action Pack: Possible sensitive session information leak in Active Storage proxy mode

Action View: Possible XSS vulnerability in highlight helper

Action View: Possible XSS vulnerability in strip_tags

Action View: Possible XSS vulnerability in text helpers

Active Storage: Unsigned Content-Type in GCS direct uploads with cache_control

Action Pack: Possible Strong Parameters Bypass in Parameters#each_key

Pillow: Memory DoS in TIFF and EXIF IFD parsing via overlapping tag data

Pillow: Heap buffer overflow saving TIFF with libtiff when tags override image size

Hono: `csrf()` does not check requests sent by hyperlink auditing (`text/ping`)

Hono: `validator('form')` skips validation for `multipart/form-data` requests with extra parameters

Hono: `mount()` and `app.mount()` can forward a path that bypasses middleware scoped inside the mount prefix

Hono: RegExpRouter skips wildcard middleware for some route sets and for paths with an encoded line terminator

Hono: `css` helper does not escape a closing tag split between the template and an interpolated value, allowing HTML injection

@grpc/grpc-js: safe_regex incorrectly applies partial string matching for patterns with alternation

@grpc/grpc-js: RBAC override configs in VirtualHost and Route resources are not applied

msgpack-ruby JRuby decoder makes uncapped header-count allocations; a 5-byte message forces multi-GiB OOM

Addressable display_uri can show misleading hosts with invalid Punycode A-labels

Addressable display_uri can show misleading hosts containing bidi and invisible characters

Addressable: Denial of service in URI path normalization

Astro: Reflected XSS via unescaped slot names in @astrojs/solid-js

Astro: Reflected XSS via unescaped slot names in @astrojs/svelte

Addressable: Regular Expression Denial of Service in templates with certain exploded expressions

Addressable: Regular Expression Denial of Service in templates with multiple variables

Addressable URI normalization resolves some dotted path segments to the wrong path

basic-ftp: Uncaught exception crashes the Node.js process when a password (or resumed-download path) contains CR/LF

Action View: Possible XSS vulnerability in tag helpers

Active Storage: Possible local file disclosure in video previews and analysis

basic-ftp: Uncaught TypeError in MLSD directory-listing parser via __proto__ fact name causes DoS in Client.list()

@hono/node-server: Unhandled `ECONNRESET` on the socket during an asynchronous WebSocket upgrade crashes the process

A flaw was found in Foreman’s Api::V2::SshKeysController, where the target user is resolved...

datamodel-code-generator before 0.84.0 contains a code injection vulnerability that allows...

A flaw was found in Foreman’s Api::V2::MailNotificationsController, where authorization checks on...

A flaw was found in Foreman’s Api::V2::PersonalAccessTokensController, where Foreman::Controller:...

Sendcloud for WooCommerce through 1.0.41 contains a missing authorization vulnerability that...

Authentication bypass using an alternate path or channel vulnerability in Johnson Controls EasyIO...

Image CAPTCHA for Contact Form 7 and WPForms through 3.3.29 contains a CAPTCHA bypass...

A vulnerability was found in Governikus AusweisApp Mobile up to 2.5.5. This impacts an unknown...

XWEB EVO 5.6.2 through 5.8.8 contains an information disclosure vulnerability that allows...

XWEB EVO 5.6.2 through 5.8.8 contains an authenticated OS command injection vulnerability in the...

XWEB EVO 5.6.2 through 5.8.8 contains an authentication bypass vulnerability that allows...

XWEB EVO 5.6.2 through 5.8.8 contains a hardcoded credential vulnerability where the...

XWEB EVO 4.3.0 through 5.8.8 contains an unauthenticated arbitrary file write vulnerability that...

XWEB EVO 5.2.3 through 5.8.8 contains an authenticated OS command injection vulnerability in the...

XWEB EVO before 5.6.2 contains a command injection vulnerability that allows unauthenticated...

XWEB EVO 5.2.3 through 5.8.8 contains an authenticated OS command injection vulnerability that...

XWEB EVO before 5.6.2 contains a pre-authentication OS command injection vulnerability that...

A flaw was found in rubygem-safemode. Compound assignment expressions in sandboxed code are...

A missing authorization check has been found in ConsumerResource.setupOwner() function of...

Insufficient parameter sanitization in AMD Secure Processor (ASP) TEE DrvSys could allow an...

XWEB EVO before 5.6.2 contains a hardcoded backdoor password vulnerability that allows...

A flaw was found in Foreman. An authenticated user with view_hosts privileges can retrieve...

An improper authentication vulnerability has been found in the task console in the...

XWEB EVO versions 5.2.3 through before 5.7.0 contains a pre-authentication OS command injection...

XWEB EVO through 5.8.8 contains a predictable credential generation vulnerability that allows...

Improper authentication in Bootgen could result in the use of a fixed salt value for RSA padding...