Graphql Modules: Competition Condition Vulnerability

Graphql Modules is a backend framework for GraphQL servers, open-sourced by Hive. Versions of Graphql Modules from 2.2.1 to 2.4.1, as well as versions before 3.1.1, have a race condition vulnerability. This vulnerability stems from context confusion during parallel requests, which may lead to...

AZL-49740 CVE-2024-42861 affecting package linuxptp for versions less than 3.1.1-1

An issue in IEEE 802.1AS linuxptp v.4.2 and before allowing a remote attacker to cause a denial of service via a crafted PdelayReq message to the time synchronization function...

Discourse Security Breach

Discourse is an open source community discussion platform. The platform includes features such as communities, email and chat rooms. A security vulnerability exists in versions prior to Discourse 3.1.1. An attacker exploiting this vulnerability could perform a denial-of-service attack...

AZL-26161 CVE-2022-37601 affecting package reaper for versions less than 3.1.1-3

Prototype pollution vulnerability in function parseQuery in parseQuery.js in webpack loader-utils via the name variable in parseQuery.js. This affects all versions prior to 1.4.1 and 2.0.3...

PT-2022-24535 · Unknown · Openharmony

Name of the Vulnerable Software and Affected Versions: OpenHarmony versions prior to 3.1.1 Description: The issue allows LAN attackers to bypass permission control, gaining control of the camera service. Recommendations: For OpenHarmony versions prior to 3.1.1, at the moment, there is no...