advisory database - Robuta Search

https://advisories.gitlab.com/pkg/npm/nitropack/ Npm/Nitropack | GitLab Advisory Database (GLAD) advisory database npm nitropack gitlab glad https://advisories.gitlab.com/composer/concrete5/concrete5/CVE-2023-48652/ Cross-Site Request Forgery (CSRF) | GitLab Advisory Database (GLAD) CVE-2023-48652 Cross-Site Request Forgery (CSRF): Concrete CMS 9 before 9.2.3 is vulnerable to Cross Site Request Forgery (CSRF) via... cross site request forgery advisory database csrf gitlab glad https://advisories.gitlab.com/composer/silverstripe/framework/GHSA-m8v7-x398-pxrf/ Silverstripe XSS in CMS Edit Page | GitLab Advisory Database (GLAD) GHSA-m8v7-x398-pxrf Silverstripe XSS in CMS Edit Page: Due to a lack of parameter sanitisation a carefully crafted URL could be used to inject arbitrary HTML... edit page advisory database silverstripe xss cms https://advisories.gitlab.com/pypi/changedetection.io/CVE-2024-51483/ changedetection.io Path Traversal | GitLab Advisory Database (GLAD) CVE-2024-51483 changedetection.io Path Traversal: When a WebDriver is used to fetch files source:file:///etc/passwd can be used to retrieve local system files,... path traversal advisory database changedetection gitlab glad https://advisories.gitlab.com/pkg/npm/orbit-soap/ Npm/Orbit-Soap | GitLab Advisory Database (GLAD) advisory database npm orbit soap gitlab https://advisories.gitlab.com/pypi/apache-superset/CVE-2024-23952/ Apache Superset uncontrolled resource consumption | GitLab Advisory Database (GLAD) CVE-2024-23952 Apache Superset uncontrolled resource consumption: Duplicate Advisory This advisory has been withdrawn because it is a duplicate of... apache superset resource consumption advisory database uncontrolled gitlab https://advisories.gitlab.com/maven/com.liferay.portal/release.portal.bom/CVE-2021-33321/ Liferay Portal and Liferay DXP insecure default configuration | GitLab Advisory Database (GLAD) CVE-2021-33321 Liferay Portal and Liferay DXP insecure default configuration: Insecure default configuration in portal services implementation before 5.11.0 in... liferay portal default configuration advisory database dxp insecure https://advisories.gitlab.com/golang/github.com/mattermost/mattermost/server/v8/CVE-2025-2564/ Mattermost Incorrect Authorization vulnerability | GitLab Advisory Database (GLAD) advisory database mattermost incorrect authorization vulnerability https://advisories.gitlab.com/npm/mathjax/CVE-2023-39663/ Inefficient Regular Expression Complexity | GitLab Advisory Database (GLAD) CVE-2023-39663 Inefficient Regular Expression Complexity: Mathjax up to v2.7.9 was discovered to contain two Regular expression Denial of Service (ReDoS)... regular expression advisory database inefficient complexity gitlab https://advisories.gitlab.com/golang/github.com/usememos/memos/CVE-2022-4798/ Improper Authorization | GitLab Advisory Database (GLAD) CVE-2022-4798 Improper Authorization: Improper Authorization in GitHub repository usememos/memos prior to 0.9.1. advisory database improper authorization gitlab glad https://advisories.gitlab.com/nuget/magick.net-q16-hdri-openmp-arm64/CVE-2025-68469/ ImageMagick has a heap-buffer-overflow | GitLab Advisory Database (GLAD) CVE-2025-68469 ImageMagick has a heap-buffer-overflow: While Processing a crafted TIFF file, imagemagick crashes. has a buffer overflow advisory database imagemagick heap https://advisories.gitlab.com/pkg/maven/org.xwiki.platform/xwiki-platform-flamingo-theme-ui/ Maven/Org.xwiki.platform/Xwiki-Platform-Flamingo-Theme-Ui | GitLab Advisory Database (GLAD) xwiki platform advisory database maven flamingo https://advisories.gitlab.com/golang/github.com/aquasecurity/trivy/GHSA-69fq-xp46-6x23/ Embedded Malicious Code in Trivy binary | GitLab Advisory Database (GLAD) GHSA-69fq-xp46-6x23 Embedded Malicious Code in Trivy binary: On March 19, 2026, threat actor TeamPCP used compromised credentials to publish a malicious Trivy... malicious code advisory database embedded trivy binary https://advisories.gitlab.com/pkg/maven/org.grails.plugins/fields/ Maven/Org.grails.plugins/Fields | GitLab Advisory Database (GLAD) advisory database maven grails plugins fields https://advisories.gitlab.com/maven/org.apache.shenyu/shenyu/CVE-2023-25753/ Server-Side Request Forgery (SSRF) | GitLab Advisory Database (GLAD) CVE-2023-25753 Server-Side Request Forgery (SSRF): There exists an SSRF (Server-Side Request Forgery) vulnerability located at the /sandbox/proxyGateway... server side advisory database request forgery ssrf https://advisories.gitlab.com/npm/directus/CVE-2024-34709/ Directus Lacks Session Tokens Invalidation | GitLab Advisory Database (GLAD) CVE-2024-34709 Directus Lacks Session Tokens Invalidation: Currently session tokens function like the other JWT tokens where they are not actually invalidated... session tokens advisory database directus lacks invalidation https://advisories.gitlab.com/composer/backdrop/backdrop/CVE-2022-42096/ Cross-site Scripting in Backdrop CMS | GitLab Advisory Database (GLAD) CVE-2022-42096 Cross-site Scripting in Backdrop CMS: Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability... cross site scripting backdrop cms advisory database gitlab glad https://advisories.gitlab.com/pypi/swift/CVE-2022-47950/ OpenStack Swift XML external entities (XXE) Injection | GitLab Advisory Database (GLAD) CVE-2022-47950 OpenStack Swift XML external entities (XXE) Injection: An issue was discovered in OpenStack Swift before 2.28.1, 2.29.x before 2.29.2, and... openstack swift external entities xxe injection advisory database xml https://advisories.gitlab.com/golang/github.com/zitadel/zitadel/CVE-2024-39683/ ZITADEL Vulnerable to Session Information Leakage | GitLab Advisory Database (GLAD) CVE-2024-39683 ZITADEL Vulnerable to Session Information Leakage: ZITADEL provides users the ability to list all user sessions of the current user agent... session information advisory database vulnerable leakage gitlab https://advisories.gitlab.com/nuget/microsoft.netcore.app.runtime.mono.llvm.osx-x64/CVE-2021-34485/ .NET Core Information Disclosure Vulnerability | GitLab Advisory Database (GLAD) CVE-2021-34485 .NET Core Information Disclosure Vulnerability: .NET Core and Visual Studio Information Disclosure Vulnerability net core information disclosure advisory database vulnerability gitlab https://advisories.gitlab.com/npm/nodebb/CVE-2025-50979/ NodeBB SQL Injection vulnerability | GitLab Advisory Database (GLAD) CVE-2025-50979 NodeBB SQL Injection vulnerability: NodeBB v4.3.0 is vulnerable to SQL injection in its search-categories API endpoint... sql injection advisory database nodebb vulnerability gitlab https://advisories.gitlab.com/golang/istio.io/istio/pkg/log/CVE-2019-12243/ Vulnerability in Istio | GitLab Advisory Database (GLAD) CVE-2019-12243 Vulnerability in Istio: Istio 1.1.x through 1.1.6 has Incorrect Access Control. advisory database vulnerability istio gitlab glad https://advisories.gitlab.com/composer/mediawiki/core/CVE-2020-10959/ MediaWiki Open Redirect vulnerability | GitLab Advisory Database (GLAD) CVE-2020-10959 MediaWiki Open Redirect vulnerability: resources/src/mediawiki.page.ready/ready.js in MediaWiki before 1.34.0-rc.0 allows remote attackers to... open redirect advisory database mediawiki vulnerability gitlab https://advisories.gitlab.com/pkg/maven/net.pwall.json/jsonutil/ Maven/Net.pwall.json/Jsonutil | GitLab Advisory Database (GLAD) advisory database maven json gitlab glad https://advisories.gitlab.com/golang/go.temporal.io/api/CVE-2025-1243/ Unencrypted transmission in Temporal api-go library | GitLab Advisory Database (GLAD) CVE-2025-1243 Unencrypted transmission in Temporal api-go library: The Temporal api-go library prior to version 1.44.1 did not send update response information... go library advisory database unencrypted transmission temporal https://advisories.gitlab.com/pypi/crate/CVE-2023-51982/ CrateDB authentication bypass vulnerability | GitLab Advisory Database (GLAD) CVE-2023-51982 CrateDB authentication bypass vulnerability: CrateDB 5.5.1 is contains an authentication bypass vulnerability in the Admin UI component. After... authentication bypass advisory database cratedb vulnerability gitlab https://advisories.gitlab.com/nuget/microsoft.netcore.app.runtime.linux-arm64/CVE-2020-1108/ .NET Core & .NET Framework Denial of Service Vulnerability | GitLab Advisory Database (GLAD) denial of service net core advisory database framework https://advisories.gitlab.com/golang/github.com/kudelskisecurity/crystals-go/GMS-2024-36/ Duplicate | GitLab Advisory Database (GLAD) GMS-2024-36 Duplicate: This advisory duplicates another. advisory database duplicate gitlab glad https://advisories.gitlab.com/composer/melisplatform/melis-cms/CVE-2022-39298/ Deserialization of Untrusted Data | GitLab Advisory Database (GLAD) CVE-2022-39298 Deserialization of Untrusted Data: MelisFront is the engine that displays website hosted on Melis Platform. It deals with showing pages,... advisory database deserialization untrusted gitlab glad https://advisories.gitlab.com/composer/zoujingli/thinkadmin/CVE-2023-34833/ Unrestricted Upload of File with Dangerous Type | GitLab Advisory Database (GLAD) CVE-2023-34833 Unrestricted Upload of File with Dangerous Type: An arbitrary file upload vulnerability in the component /api/upload.php of ThinkAdmin v6 allows... advisory database unrestricted upload file https://advisories.gitlab.com/pkg/npm/web-types-lit/ Npm/Web-Types-Lit | GitLab Advisory Database (GLAD) advisory database npm web types lit https://advisories.gitlab.com/pkg/pypi/ipycache/ Pypi/Ipycache | GitLab Advisory Database (GLAD) advisory database pypi gitlab glad https://advisories.gitlab.com/golang/github.com/mattermost/mattermost-server/CVE-2025-49810/ Mattermost Lack of Access Control Validation | GitLab Advisory Database (GLAD) access control advisory database mattermost lack validation https://advisories.gitlab.com/composer/phenx/php-svg-lib/CVE-2024-25117/ External Control of File Name or Path | GitLab Advisory Database (GLAD) CVE-2024-25117 External Control of File Name or Path: php-svg-lib is a scalable vector graphics (SVG) file parsing/rendering library. Prior to version 0.5.2,... external control file name advisory database https://advisories.gitlab.com/composer/funadmin/funadmin/CVE-2026-2894/ funadmin exposes sensitive information via getMember function | GitLab Advisory Database (GLAD) CVE-2026-2894 funadmin exposes sensitive information via getMember function: A vulnerability was identified in funadmin up to 7.1.0-rc4. Affected by this... sensitive information advisory database funadmin exposes via https://advisories.gitlab.com/nuget/microsoft.aspnetcore.app.runtime.linux-musl-x64/CVE-2026-26130/ .NET Denial of Service Vulnerability | GitLab Advisory Database (GLAD) CVE-2026-26130 .NET Denial of Service Vulnerability: Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 8.0,... denial of service advisory database vulnerability gitlab glad https://advisories.gitlab.com/maven/org.jenkins-ci.plugins/testquality-updater/CVE-2023-24452/ Cross-Site Request Forgery (CSRF) | GitLab Advisory Database (GLAD) CVE-2023-24452 Cross-Site Request Forgery (CSRF): A cross-site request forgery (CSRF) vulnerability in Jenkins TestQuality Updater Plugin 1.3 and earlier... cross site request forgery advisory database csrf gitlab glad https://advisories.gitlab.com/pkg/npm/@cyanheads/git-mcp-server/ Npm/@Cyanheads/Git-Mcp-Server | GitLab Advisory Database (GLAD) mcp server advisory database npm cyanheads git https://advisories.gitlab.com/maven/org.eclipse.jetty.http2/jetty-http2-common/CVE-2023-44487/ HTTP/2 Stream Cancellation Attack | GitLab Advisory Database (GLAD) CVE-2023-44487 HTTP/2 Stream Cancellation Attack: HTTP/2 Rapid reset attack The HTTP/2 protocol allows clients to indicate to the server that a previous stream... advisory database http stream cancellation attack https://advisories.gitlab.com/composer/magento/community-edition/CVE-2020-9587/ Magento authorization bypass vulnerability | GitLab Advisory Database (GLAD) CVE-2020-9587 Magento authorization bypass vulnerability: Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4... advisory database magento authorization bypass vulnerability https://advisories.gitlab.com/pkg/pypi/badkeys/ Pypi/Badkeys | GitLab Advisory Database (GLAD) advisory database pypi gitlab glad https://advisories.gitlab.com/golang/github.com/mattermost/mattermost/server/v8/CVE-2025-41410/ Mattermost has a Missing Authorization vulnerability | GitLab Advisory Database (GLAD) has a missing authorization advisory database mattermost vulnerability https://advisories.gitlab.com/composer/froxlor/froxlor/GHSA-7j6w-p859-464f/ Duplicate | GitLab Advisory Database (GLAD) GHSA-7j6w-p859-464f Duplicate: This advisory duplicates another. advisory database duplicate gitlab glad https://advisories.gitlab.com/composer/magento/community-edition/CVE-2019-7899/ Improper Input Validation | GitLab Advisory Database (GLAD) CVE-2019-7899 Improper Input Validation: Names of disabled downloadable products could be disclosed due to inadequate validation of user input in Magento Open... improper input validation advisory database gitlab glad https://advisories.gitlab.com/golang/github.com/mattermost/mattermost-server/CVE-2025-6465/ Mattermost Fails to Sanitize File Names | GitLab Advisory Database (GLAD) file names advisory database mattermost fails sanitize https://advisories.gitlab.com/cargo/surrealdb/GHSA-jm4v-58r5-66hj/ Uncaught Exception in surrealdb | GitLab Advisory Database (GLAD) GHSA-jm4v-58r5-66hj Uncaught Exception in surrealdb: Although custom parameters and functions are only supported at the database level, it was allowed to... advisory database exception surrealdb gitlab glad https://advisories.gitlab.com/composer/prestashop/prestashop/GMS-2022-8006/ Information Exposure | GitLab Advisory Database (GLAD) GMS-2022-8006 Information Exposure: Potential Information exposure in the upload directory advisory database information exposure gitlab glad https://advisories.gitlab.com/pypi/tensorflow-cpu/GMS-2022-7004/ `CHECK` failure in `SobolSample` via missing validation | GitLab Advisory Database (GLAD) GMS-2022-7004 `CHECK` failure in `SobolSample` via missing validation: Impact Another instance of CVE-2022-35935, where SobolSample is vulnerable to a denial... missing validation advisory database check failure sobolsample https://advisories.gitlab.com/pkg/npm/shell-quote/ Npm/Shell-Quote | GitLab Advisory Database (GLAD) advisory database npm shell quote gitlab https://advisories.gitlab.com/maven/org.jenkins-ci.plugins/opsgenie/CVE-2022-34804/ Cleartext Storage of Sensitive Information in Executable | GitLab Advisory Database (GLAD) CVE-2022-34804 Cleartext Storage of Sensitive Information in Executable: Jenkins OpsGenie Plugin 1.9 and earlier transmits API keys in plain text as part of... sensitive information advisory database cleartext storage https://advisories.gitlab.com/pypi/tensorflow/CVE-2022-35970/ Improper Input Validation | GitLab Advisory Database (GLAD) CVE-2022-35970 Improper Input Validation: TensorFlow is an open source platform for machine learning. If QuantizedInstanceNorm is given x_min or x_max tensors... improper input validation advisory database gitlab glad https://advisories.gitlab.com/maven/io.metersphere/metersphere/CVE-2023-32699/ Allocation of Resources Without Limits or Throttling | GitLab Advisory Database (GLAD) CVE-2023-32699 Allocation of Resources Without Limits or Throttling: MeterSphere is an open source continuous testing platform. Version 2.9.1 and prior is... allocation of resources without limits advisory database https://advisories.gitlab.com/pypi/gradio/CVE-2024-2206/ gradio Server-Side Request Forgery vulnerability | GitLab Advisory Database (GLAD) CVE-2024-2206 gradio Server-Side Request Forgery vulnerability: The /proxy route allows a user to proxy arbitrary urls including potential internal endpoints. server side advisory database gradio request forgery https://advisories.gitlab.com/maven/org.apache.pulsar/pulsar-broker/CVE-2023-31007/ Improper Authentication | GitLab Advisory Database (GLAD) CVE-2023-31007 Improper Authentication: Improper Authentication vulnerability in Apache Software Foundation Apache Pulsar Broker allows a client to stay... improper authentication advisory database gitlab glad https://advisories.gitlab.com/maven/org.bouncycastle/bcpkix-jdk18on/CVE-2023-33202/ Uncontrolled Resource Consumption | GitLab Advisory Database (GLAD) CVE-2023-33202 Uncontrolled Resource Consumption: Bouncy Castle for Java before 1.73 contains a potential Denial of Service (DoS) issue within the Bouncy... resource consumption advisory database uncontrolled gitlab glad https://advisories.gitlab.com/golang/github.com/grafana/grafana/CVE-2022-39324/ Grafana Spoofing originalUrl of snapshots | GitLab Advisory Database (GLAD) CVE-2022-39324 Grafana Spoofing originalUrl of snapshots: To create a snapshot (and insert an arbitrary URL) the built-in role Viewer is sufficient. When a... advisory database grafana spoofing snapshots gitlab https://advisories.gitlab.com/composer/drupal/core/GMS-2022-3362/ Drupal core Information Disclosure vulnerability | GitLab Advisory Database (GLAD) GMS-2022-3362 Drupal core Information Disclosure vulnerability: In some situations, the Image module does not correctly check access to image files not stored... drupal core information disclosure advisory database vulnerability gitlab https://advisories.gitlab.com/pkg/npm/servify-express/ Npm/Servify-Express | GitLab Advisory Database (GLAD) advisory database npm express gitlab glad https://advisories.gitlab.com/pkg/npm/yargs-help-output/ Npm/Yargs-Help-Output | GitLab Advisory Database (GLAD) advisory database npm help output gitlab https://advisories.gitlab.com/composer/magento/project-community-edition/CVE-2021-21032/ Magento Insufficient Session Expiration | GitLab Advisory Database (GLAD) CVE-2021-21032 Magento Insufficient Session Expiration: Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) do not adequately... session expiration advisory database magento insufficient gitlab https://advisories.gitlab.com/maven/org.springframework.security/spring-security-crypto/CVE-2025-22228/ Spring Security Does Not Enforce Password Length | GitLab Advisory Database (GLAD) CVE-2025-22228 Spring Security Does Not Enforce Password Length: BCryptPasswordEncoder.matches(CharSequence,String) will incorrectly return true for passwords... spring security does not advisory database enforce https://advisories.gitlab.com/golang/github.com/kyverno/kyverno/GHSA-gg4x-fgg2-h9w9/ Bypassing Kyverno Policies via Double Policy Exceptions | GitLab Advisory Database (GLAD) GHSA-gg4x-fgg2-h9w9 Bypassing Kyverno Policies via Double Policy Exceptions: If a cluster has a Kyverno policy in enforce mode and there are two exceptions,... advisory database bypassing kyverno policies via https://advisories.gitlab.com/npm/chai-friendly/MAL-2025-48990/ Malicious code in chai-friendly (npm) | GitLab Advisory Database (GLAD) MAL-2025-48990 Malicious code in chai-friendly (npm): This malicious package was published during the PhantomRaven NPM campaign. The malicious payload steals... malicious code advisory database chai friendly npm https://advisories.gitlab.com/pkg/cargo/solana_rbpf/ Cargo/Solana_rbpf | GitLab Advisory Database (GLAD) advisory database cargo solana gitlab glad https://advisories.gitlab.com/composer/froxlor/froxlor/CVE-2022-3017/ Cross-Site Request Forgery (CSRF) | GitLab Advisory Database (GLAD) CVE-2022-3017 Cross-Site Request Forgery (CSRF): Cross-Site Request Forgery (CSRF) in GitHub repository froxlor/froxlor prior to 0.10.38. cross site request forgery advisory database csrf gitlab glad https://advisories.gitlab.com/pypi/lemur/CVE-2015-7764/ Lemur uses static IV per key | GitLab Advisory Database (GLAD) CVE-2015-7764 Lemur uses static IV per key: Lemur 0.1.4 does not use sufficient entropy in its IV when encrypting AES in CBC mode. static iv advisory database lemur uses per https://advisories.gitlab.com/composer/pimcore/pimcore/GHSA-hq76-662x-7mw4/ Pimcore includes vulnerable PHPOffice/PhpSpreadsheet | GitLab Advisory Database (GLAD) GHSA-hq76-662x-7mw4 Pimcore includes vulnerable PHPOffice/PhpSpreadsheet: Pimcore 10.6.x and Enterprise 10.6.x versions currently depend on... advisory database pimcore includes vulnerable phpoffice https://advisories.gitlab.com/npm/@quasar/quasar-ui-qmarkdown/CVE-2025-43954/ QMarkdown Cross-Site Scripting (XSS) vulnerability | GitLab Advisory Database (GLAD) CVE-2025-43954 QMarkdown Cross-Site Scripting (XSS) vulnerability: QMarkdown (aka quasar-ui-qmarkdown) before 2.0.5 allows XSS via headers even when when... cross site scripting xss advisory database vulnerability gitlab glad https://advisories.gitlab.com/swift/github.com/grpc/grpc-swift/CVE-2021-36155/ Uncontrolled Resource Consumption in LengthPrefixedMessageReader | GitLab Advisory Database (GLAD) CVE-2021-36155 Uncontrolled Resource Consumption in LengthPrefixedMessageReader: Affected gRPC Swift clients and servers are vulnerable to uncontrolled... resource consumption advisory database uncontrolled gitlab glad https://advisories.gitlab.com/maven/org.terasoluna.gfw/terasoluna-gfw-common/CVE-2022-43484/ Improper Input Validation | GitLab Advisory Database (GLAD) CVE-2022-43484 Improper Input Validation: TERASOLUNA Global Framework 1.0.0 (Public review version) and TERASOLUNA Server Framework for Java (Rich) 2.0.0.2 to... improper input validation advisory database gitlab glad https://advisories.gitlab.com/maven/net.sf.jasperreports/jasperreports/CVE-2025-10492/ JasperReports has a Java deserialisation vulnerability | GitLab Advisory Database (GLAD) CVE-2025-10492 JasperReports has a Java deserialisation vulnerability: A Java deserialisation vulnerability has been discovered in the Jaspersoft Library.... has a advisory database jasperreports java vulnerability https://advisories.gitlab.com/pypi/langchain/CVE-2024-5998/ LangChain pickle deserialization of untrusted data | GitLab Advisory Database (GLAD) CVE-2024-5998 LangChain pickle deserialization of untrusted data: A vulnerability in the FAISS.deserialize_from_bytes function of langchain-ai/langchain allows... advisory database langchain pickle deserialization untrusted https://advisories.gitlab.com/nuget/microsoft.netcore.app.runtime.osx-arm64/CVE-2026-26127/ .NET Denial of Service Vulnerability | GitLab Advisory Database (GLAD) CVE-2026-26127 .NET Denial of Service Vulnerability: Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 9.0 and... denial of service advisory database vulnerability gitlab glad https://advisories.gitlab.com/nuget/microsoft.netcore.app.runtime.win-arm/CVE-2020-1108/ .NET Core & .NET Framework Denial of Service Vulnerability | GitLab Advisory Database (GLAD) denial of service net core advisory database framework https://advisories.gitlab.com/maven/org.jenkins-ci.plugins/beaker-builder/CVE-2022-34207/ Cross-Site Request Forgery (CSRF) | GitLab Advisory Database (GLAD) CVE-2022-34207 Cross-Site Request Forgery (CSRF): A cross-site request forgery (CSRF) vulnerability in Jenkins Beaker builder Plugin 1.10 and earlier allows... cross site request forgery advisory database csrf gitlab glad https://advisories.gitlab.com/composer/magento/community-edition/CVE-2021-36040/ Magento has a file extension restrictions bypass | GitLab Advisory Database (GLAD) CVE-2021-36040 Magento has a file extension restrictions bypass: Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier)... has a file extension advisory database magento https://advisories.gitlab.com/pypi/mlflow/CVE-2024-37052/ MLFlow unsafe deserialization | GitLab Advisory Database (GLAD) CVE-2024-37052 MLFlow unsafe deserialization: Deserialization of untrusted data can occur in versions of the MLflow platform running version 1.1.0 or newer,... advisory database mlflow unsafe deserialization gitlab https://advisories.gitlab.com/maven/org.apache.activemq/apache-activemq/CVE-2026-41043/ Apache ActiveMQ Vulnerable to Cross-site Scripting | GitLab Advisory Database (GLAD) CVE-2026-41043 Apache ActiveMQ Vulnerable to Cross-site Scripting: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability... cross site scripting apache activemq advisory database vulnerable https://advisories.gitlab.com/maven/cn.dev33/sa-token-core/CVE-2023-44794/ SaToken privilege escalation vulnerability | GitLab Advisory Database (GLAD) CVE-2023-44794 SaToken privilege escalation vulnerability: An issue in Dromara SaToken version 1.36.0 and before allows a remote attacker to escalate... privilege escalation advisory database satoken vulnerability gitlab https://advisories.gitlab.com/maven/org.jenkins-ci.plugins/tag-profiler/CVE-2023-33003/ Cross-Site Request Forgery (CSRF) | GitLab Advisory Database (GLAD) CVE-2023-33003 Cross-Site Request Forgery (CSRF): A cross-site request forgery (CSRF) vulnerability in Jenkins Tag Profiler Plugin 0.2 and earlier allows... cross site request forgery advisory database csrf gitlab glad https://advisories.gitlab.com/npm/jsdom/CVE-2021-20066/ Insufficient Granularity of Access Control in JSDom | GitLab Advisory Database (GLAD) CVE-2021-20066 Insufficient Granularity of Access Control in JSDom: JSDom improperly allows the loading of local resources, which allows for local files to be... access control advisory database insufficient granularity https://advisories.gitlab.com/nuget/libpng/CVE-2021-4214/ Out-of-bounds Write | GitLab Advisory Database (GLAD) CVE-2021-4214 Out-of-bounds Write: A heap overflow flaw was found in libpngs' pngimage.c program. This flaw allows an attacker with local network access to... out of bounds advisory database write gitlab glad https://advisories.gitlab.com/pypi/zenml/CVE-2024-25723/ ZenML Server Remote Privilege Escalation Vulnerability | GitLab Advisory Database (GLAD) CVE-2024-25723 ZenML Server Remote Privilege Escalation Vulnerability: ZenML Server in the ZenML package before 0.46.7 for Python allows remote privilege... privilege escalation advisory database server remote vulnerability https://advisories.gitlab.com/composer/funadmin/funadmin/CVE-2024-48225/ SQL injection in funadmin | GitLab Advisory Database (GLAD) CVE-2024-48225 SQL injection in funadmin: Funadmin v5.0.2 has an arbitrary file deletion vulnerability in /curd/index/delfile. sql injection advisory database funadmin gitlab glad https://advisories.gitlab.com/pkg/maven/com.schibsted.security/strongbox-sdk/ Maven/Com.schibsted.security/Strongbox-Sdk | GitLab Advisory Database (GLAD) advisory database maven schibsted security strongbox https://advisories.gitlab.com/pypi/djangocms-attributes-field/CVE-2024-11406/ django CMS Attributes Field Cross-site Scripting | GitLab Advisory Database (GLAD) CVE-2024-11406 django CMS Attributes Field Cross-site Scripting: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')... cross site scripting django cms advisory database attributes field https://advisories.gitlab.com/composer/magento/community-edition/CVE-2021-36028/ Magento has an XML Injection vulnerability | GitLab Advisory Database (GLAD) CVE-2021-36028 Magento has an XML Injection vulnerability: Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are... xml injection advisory database magento vulnerability gitlab https://advisories.gitlab.com/golang/github.com/zitadel/zitadel/CVE-2023-47111/ ZITADEL race condition in lockout policy execution | GitLab Advisory Database (GLAD) CVE-2023-47111 ZITADEL race condition in lockout policy execution: ZITADEL provides identity infrastructure. ZITADEL provides administrators the possibility to... race condition policy execution advisory database lockout https://advisories.gitlab.com/maven/com.liferay.portal/release.portal.bom/CVE-2025-43731/ Liferay Portal Vulnerable to Cross-Site Scripting | GitLab Advisory Database (GLAD) CVE-2025-43731 Liferay Portal Vulnerable to Cross-Site Scripting: A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through... cross site scripting liferay portal advisory database vulnerable https://advisories.gitlab.com/maven/org.apache.skywalking/apm-webapp/CVE-2025-54057/ Apache SkyWalking has a stored XSS vulnerability | GitLab Advisory Database (GLAD) CVE-2025-54057 Apache SkyWalking has a stored XSS vulnerability: There is an Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)... apache skywalking xss vulnerability advisory database stored https://advisories.gitlab.com/npm/react-native-reanimated/CVE-2022-24373/ Uncontrolled Resource Consumption | GitLab Advisory Database (GLAD) CVE-2022-24373 Uncontrolled Resource Consumption: The package react-native-reanimated is vulnerable to Regular Expression Denial of Service (ReDoS) due to... resource consumption advisory database uncontrolled gitlab glad https://advisories.gitlab.com/npm/keycloak-connect/CVE-2022-3916/ Insufficient Session Expiration | GitLab Advisory Database (GLAD) CVE-2022-3916 Insufficient Session Expiration: A flaw was found in the offline_access scope in Keycloak. This issue would affect users of shared computers more... session expiration advisory database insufficient gitlab glad https://advisories.gitlab.com/golang/github.com/projectcalico/calico/CVE-2022-28224/ Calico vulnerable to pod route hijacking | GitLab Advisory Database (GLAD) CVE-2022-28224 Calico vulnerable to pod route hijacking: Clusters using Calico (version 3.22.1 and below), Calico Enterprise (version 3.12.0 and below), may be... advisory database calico vulnerable pod route https://advisories.gitlab.com/gem/loofah/CVE-2022-23516/ Uncontrolled Recursion in Loofah | GitLab Advisory Database (GLAD) advisory database uncontrolled recursion loofah gitlab https://advisories.gitlab.com/npm/sweetalert2/GMS-2022-7288/ Duplicate | GitLab Advisory Database (GLAD) GMS-2022-7288 Duplicate: This advisory duplicates another. advisory database duplicate gitlab glad https://advisories.gitlab.com/maven/org.xwiki.platform/xwiki-platform-tag-ui/GMS-2022-6936/ Cross-Site Request Forgery (CSRF) | GitLab Advisory Database (GLAD) GMS-2022-6936 Cross-Site Request Forgery (CSRF): Cross-Site Request Forgery (CSRF) in org.xwiki.platform:xwiki-platform-tag-ui. cross site request forgery advisory database csrf gitlab glad https://advisories.gitlab.com/golang/github.com/usememos/memos/CVE-2022-4688/ Improper Authorization | GitLab Advisory Database (GLAD) CVE-2022-4688 Improper Authorization: Improper Authorization in GitHub repository usememos/memos prior to 0.9.0. advisory database improper authorization gitlab glad https://advisories.gitlab.com/composer/wallabag/wallabag/CVE-2023-0737/ CSRF leading to delete account in wallabag/wallabag | GitLab Advisory Database (GLAD) CVE-2023-0737 CSRF leading to delete account in wallabag/wallabag: wallabag version 2.5.2 contains a Cross-Site Request Forgery (CSRF) vulnerability that... delete account advisory database csrf leading https://advisories.gitlab.com/npm/twilio-ts/MAL-2025-49058/ Malicious code in twilio-ts (npm) | GitLab Advisory Database (GLAD) MAL-2025-49058 Malicious code in twilio-ts (npm): This malicious package was published during the PhantomRaven NPM campaign. The malicious payload steals... malicious code advisory database twilio ts npm https://advisories.gitlab.com/conan/jerryscript/CVE-2021-41683/ Out-of-bounds Write | GitLab Advisory Database (GLAD) CVE-2021-41683 Out-of-bounds Write: There is a stack-overflow at ecma-helpers.c:326 in ecma_get_lex_env_type in JerryScript 2.4.0 out of bounds advisory database write gitlab glad