CVE-2024-51408

AppSmith Community 1.8.3 before 1.46 allows SSRF via New DataSource for application/json requests to 169.254.169.254 to retrieve AWS metadata credentials...

CVE-2024-51408

AppSmith Community 1.8.3 before 1.46 allows SSRF via New DataSource for application/json requests to 169.254.169.254 to retrieve AWS metadata credentials...

Laravel Reverb Missing API Signature Verification

Impact A community member disclosed an issue where verification signatures for requests sent to Reverb's Pusher-compatible API were not being verified. This API is used in scenarios such as broadcasting a message from a backend service or for obtaining statistical information such as number of...

CVE-2024-8185

Vault Community and Vault Enterprise “Vault” clusters using Vault’s Integrated Storage backend are vulnerable to a denial-of-service DoS attack through memory exhaustion through a Raft cluster join API endpoint . An attacker may send a large volume of requests to the endpoint which may cause Vaul...

CVE-2024-8185 Vault Vulnerable to Denial of Service When Processing Raft Join Requests

Vault Community and Vault Enterprise “Vault” clusters using Vault’s Integrated Storage backend are vulnerable to a denial-of-service DoS attack through memory exhaustion through a Raft cluster join API endpoint . An attacker may send a large volume of requests to the endpoint which may cause Vaul...

CVE-2024-48569

creationtimestamp| type| source ---|---|--- 2024-10-30 20:02:59+00:00| seen| https://t.me/cvedetector/9448 2025-10-01 18:11:57+00:00| seen| MISP/af790da0-9e28-4cb7-bd4e-46ad005115c6 2025-10-08 21:59:32+00:00| seen| MISP/af790da0-9e28-4cb7-bd4e-46ad005115c6...

assistant (>=1.1.0b1, <=1.2.1b1), autonomous-agent (0.0.1) +60 more potentially affected by CVE-2024-8309 via langchain-community (>=0.2.5, <=0.2.17)

langchain-community PYPI version =0.2.5, =1.1.0b1, =0.0.549, =0.2.0b1, =1.5.0, =0.1.1, =0.0.2.7, =0.2.0, =0.4.0, =0.1.3, =0.1.3, =0.1.0, =0.1.3, =0.1.7 and more Source cves: CVE-2024-8309 Source advisory: SNYK:PYTHON-LANGCHAINCOMMUNITY-8310287...

aiagentgraph (>=0.0.1, <=0.0.4a1), apsbot (>=0.2.0, <=0.3.1) +79 more potentially affected by CVE-2024-8309 via langchain-community (>=0.2.0, <=0.2.17)

langchain-community PYPI version =0.2.0, =0.0.1, =0.2.0, =1.1.0b1, =0.1.33, =0.0.546, =0.2.0b1, =1.5.0, =0.0.5, =0.0.2, =0.1.1, =0.0.2.7, =0.2.0, =0.4.0, =0.6.0 - docfusion 0.1.0 and more Source cves: CVE-2024-8309 Source advisory: OSV:GHSA-45PG-36P6-83V9...

aiagentgraph (>=0.0.1, <=0.0.4a1), apsbot (>=0.2.0, <=0.3.1) +79 more potentially affected by CVE-2024-8309 via langchain-community (>=0.2.0, <=0.2.17)

langchain-community PYPI version =0.2.0, =0.0.1, =0.2.0, =1.1.0b1, =0.1.33, =0.0.546, =0.2.0b1, =1.5.0, =0.0.5, =0.0.2, =0.1.1, =0.0.2.7, =0.2.0, =0.4.0, =0.6.0 - docfusion 0.1.0 and more Source cves: CVE-2024-8309 Source advisory: GHSA-45PG-36P6-83V9...

@aerocorp/cli (7.0.5), @aj-archipelago/cortex (>=1.1.7, <=1.3.16) +328 more potentially affected by CVE-2024-7042 via @langchain/community (>=0.0.15, <=0.3.2)

@langchain/community NPM version =0.0.15, =1.1.7, =0.0.33-alpha2, =3.114.0, =1.0.0, =0.1.0, =0.0.1, =0.1.0, =2.0.0-next.2, =1.0.0-alpha.0, =0.2.13-alpha.0, =0.0.28, =0.0.11, =0.0.18 and more Source cves: CVE-2024-7042 Source advisory: OSV:GHSA-6M59-8FMV-M5F9...

@aerocorp/cli (7.0.5), @aj-archipelago/cortex (>=1.1.7, <=1.3.16) +328 more potentially affected by CVE-2024-7042 via @langchain/community (>=0.0.15, <=0.3.2)

@langchain/community NPM version =0.0.15, =1.1.7, =0.0.33-alpha2, =3.114.0, =1.0.0, =0.1.0, =0.0.1, =0.1.0, =2.0.0-next.2, =1.0.0-alpha.0, =0.2.13-alpha.0, =0.0.28, =0.0.11, =0.0.18 and more Source cves: CVE-2024-7042 Source advisory: GHSA-6M59-8FMV-M5F9...

aiagentgraph (>=0.0.1, <=0.0.4a1), apsbot (>=0.2.0, <=0.3.1) +79 more potentially affected by CVE-2024-8309 via langchain-community (>=0.2.0, <=0.2.17)

langchain-community PYPI version =0.2.0, =0.0.1, =0.2.0, =1.1.0b1, =0.1.33, =0.0.546, =0.2.0b1, =1.5.0, =0.0.5, =0.0.2, =0.1.1, =0.0.2.7, =0.2.0, =0.4.0, =0.6.0 - docfusion 0.1.0 and more Source cves: CVE-2024-8309 Source advisory: MEND:CVE-2024-8309...

@aerocorp/cli (7.0.5), @aj-archipelago/cortex (>=1.1.7, <=1.3.16) +328 more potentially affected by CVE-2024-7042 via @langchain/community (>=0.0.15, <=0.3.2)

@langchain/community NPM version =0.0.15, =1.1.7, =0.0.33-alpha2, =3.114.0, =1.0.0, =0.1.0, =0.0.1, =0.1.0, =2.0.0-next.2, =1.0.0-alpha.0, =0.2.13-alpha.0, =0.0.28, =0.0.11, =0.0.18 and more Source cves: CVE-2024-7042 Source advisory: MEND:CVE-2024-7042...

UBUNTU-CVE-2024-6826

An issue has been discovered in GitLab CE/EE affecting all versions from 11.2 before 17.3.6, 17.4 before 17.4.3, and 17.5 before 17.5.1. A denial of service could occur via importing a malicious crafted XML manifest file...

GitLab Enterprise Edition (EE) and GitLab Community Edition (CE) cross-site scripting vulnerabilities

GitLab Enterprise Edition EE and GitLab Community Edition CE are both products of GitLab, Inc. GitLab Enterprise Edition is a content management system. GitLab Enterprise Edition is a content management system. A cross-site scripting vulnerability exists in GitLab Enterprise Edition EE and GitLab...

GitLab Enterprise Edition (EE) and GitLab Community Edition (CE) security vulnerabilities

GitLab Enterprise Edition EE and GitLab Community Edition CE are both products of GitLab, Inc. GitLab Enterprise Edition is a content management system. GitLab Enterprise Edition is a content management system. A security vulnerability exists in GitLab Enterprise Edition EE and GitLab Community...

PT-2024-9135 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 11.2 through 17.3.5 GitLab CE/EE versions 17.4 through 17.4.2 GitLab CE/EE versions 17.5 through 17.5.0 Description: A denial of service issue has been discovered in GitLab CE/EE. This issue can be exploited by importing...

Leverage the Power of 45k, free, Hugging Face Models with Spring AI and Ollama

This blog post is co-authored by our great contributor Thomas Vitale. Ollama now supports all GGUF models from Hugging Face , allowing access to over 45,000 community-created models through Spring AI's Ollama integration, runnable locally. We'll explore using this new feature with Spring AI. The...

This Week in Spring - October 22nd, 2024

Hi, Spring fans! Welcome to another installment of This Week in Spring. I write this to you in an Uber speeding down the autobahn near Frankfurt, Germany. What a time to be alive! At the rate this driver's going, I won't have much time to write this before we've arrived, so let's dive right into...

Information Exposure

magento/community-edition is vulnerable to Information Exposure. The vulnerability is due to insufficient security measures that allow an admin attacker to bypass protections intended to safeguard confidential information...