Advisory Catalog

Apache Superset: Improper authorization validation on dashboards and charts import

Apache Superset: Improper data authorization when creating a new dataset

Apache Superset: Improper validation of SQL statements allows for unauthorized access to data

Apache Superset: Improper Neutralization of custom SQL on embedded context

Apache Superset: Improper error handling on alerts

Vyper's `extract32` can ready dirty memory

Vyper's `_abi_decode` vulnerable to Memory Overflow

Gradio apps vulnerable to timing attacks to guess password

Label Studio vulnerable to Cross-site Scripting if `<Choices>` or `<Labels>` are used in labeling config

Duplicate Advisory: Apache Superset uncontrolled resource consumption

Exiv2 has an out-of-bounds read in QuickTimeVideo::NikonTagsDecoder

Exiv2 has a denial of service due to unbounded recursion in QuickTimeVideo::multipleEntriesDecoder

NoneBot Potential Information Leak in User-Constructed Message Templates

Ansible-core information disclosure flaw

pyLoad open redirect vulnerability due to improper validation of the is_safe_url function

Vyper sha3 codegen bug

Vyper's external calls can overflow return data to return input buffer

Dash apps vulnerable to Cross-site Scripting

glance-store logs s3 access keys

OctoPrint Unverified Password Change via Access Control Settings

Label Studio SSRF on Import Bypassing `SSRF_PROTECTION_ENABLED` Protections

Vyper's raw_call `value=` kwargs not disabled for static and delegate calls

vantage6 may create unencrypted tasks in encrypted collaboration

aiohttp's HTTP parser (the python one, not llhttp) still overly lenient about separators

Null pointer dereference in PKCS12 parsing

Apache Airflow CNCF Kubernetes provider, Apache Airflow: Kubernetes configuration file saved without encryption in the Metadata and logged as plain text in the Triggerer service

Cross-site Scripting Vulnerability on Data Import

Whoogle Search Path Traversal vulnerability

Whoogle Search Cross-site Scripting vulnerability

html injection vulnerability in the `tuitse_html` function.

JupyterLab vulnerable to SXSS in Markdown Preview

readthedocs-sphinx-search vulnerable to cross-site scripting when including search results from malicious projects

Minor fix to previous patch for CVE-2022-35918

Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter

Apprite CLI makes Use of Hard-coded Credentials

pyload Log Injection vulnerability

Hail relies on OIDC email claims to verify the validity of a user's domain.

DoS with algorithms that use PBKDF2 due to unbounded PBES2 Count value

Open redirect vulnerability in Flask-Security-Too

Nautobot missing object-level permissions enforcement when running Job Buttons

Apache Airflow has a stored cross-site scripting vulnerability

Apache Airflow vulnerable to Exposure of Resource to Wrong Sphere

Apache Airflow Cross-Site Request Forgery vulnerability

Apache Airflow Improper Access Control vulnerability

Apache Superset uncontrolled resource consumption

Maloja error page XSS vulnerability

AsyncSSH vulnerable to Prefix Truncation Attack (a.k.a. Terrapin Attack) against ChaCha20-Poly1305 and Encrypt-then-MAC

Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin

Ansible symlink attack vulnerability

User accounts disclosed to unauthenticated actors on the LAN