Advisory Catalog

OpenZeppelin Contracts vulnerable to ECDSA signature malleability

OctoPrint does not have rate limiting on the login page

Cockpit Content Platform vulnerable to 2FA bypass

CodeIgniter Shield Vulnerable to SameSite Attackers Bypassing the CSRF Protection

django-sendfile2 before 0.7.0 contains reflected file download vulnerability

Cronos vulnerable to DoS through unintended Contract Selfdestruct

cosign's `cosign verify-attestaton --type` can report a false positive if any attestation exists

PolicyController before 0.2.1 may bypass attestation verification

Palo Alto Networks PAN-OS Reflected Amplification Denial-of-Service Vulnerability

mc-kill-port vulnerable to Arbitrary Command Execution via kill function

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

It is possible for a Reader to consume memory beyond the allowed constraints and thus lead to out of memory on the system. This issue affects Rust applications using Apache Avro Rust SDK prior to 0.14.0 (previously known as avro-rs). Users should update to apache-avro version 0.14.0 which addresses

Raneto Denial of Service via crafted payload injected into `Search` parameter

Django vulnerable to Reflected File Download attack

v8n vulnerable to Inefficient Regular Expression Complexity

graphql-go has infinite recursion in the type definition parser

sanic vulnerable to Path Traversal when using `app.static` if using encoded `%2F` URLs

OpenZeppelin Contracts's GovernorVotesQuorumFraction updates to quorum may affect past defeated proposals

Atlantis Events vulnerable to Timing Attack

mezzio-swoole Applications Using Diactoros Vulnerable to HTTP Host Header Attack

chia-blockchain tokens can be inflated to an arbitrary extent

WebRTC Heap Buffer Overflow Vulnerability

Feehi CMS arbitrary code execution via crafted PHP file

Google Chromium V8 Type Confusion Vulnerability

untangle vulnerable to Improper Restriction of XML External Entity Reference

untangle vulnerable to XML Entity Expansion

Mistune vulnerable to catastrophic backtracking

Moodle Arbitrary file read when importing lesson questions

git-archive vulnerable to Command Injection via exports function

Apache MXNet vulnerable to potential denial-of-service by excessive resource consumption

Google Chromium V8 Type Confusion Vulnerability

OpenZeppelin Contracts's SignatureChecker may revert on invalid EIP-1271 signers

OpenZeppelin Contracts's ERC165Checker may revert instead of returning false

TZInfo relative path traversal vulnerability allows loading of arbitrary files

file-type vulnerable to Infinite Loop via malformed MKV file

Drupal core arbitrary PHP code execution

Drupal core Information Disclosure vulnerability

glob-parent 6.0.0 vulnerable to Regular Expression Denial of Service

Apache SkyWalking NodeJS Agent can lose availability if header includes illegal SkyWalking header

Apache Spark UI can allow impersonation if ACLs enabled

grunt-util-property 0.0.2 function call can add/modify properties of Object.prototype using a __proto__ payload

Shoutrrr util package DoS via sending 2000, 4000, or 6000 character messages

Terser insecure use of regular expressions leads to ReDoS

LTI 1.3 Tool Library's Nonce Claim Value not validated against nonce value sent in Authentication Request before v5.0

LTI 1.3 Tool Library's function used to generate random nonces not sufficiently cryptographically complex before v5.0

fastify-bearer-auth vulnerable to Timing Attack Vector

Strapi 4.1.12 Cross-site Scripting via crafted file

Codecov does not sanitize gcov arguments

vm2 before 3.6.11 vulnerable to sandbox escape

aws-iam-authenticator allow-listed IAM identity may be able to modify their username, escalate privileges before v0.5.9