GHSA-7P8R-X3MC-P8W7 vulnerabilities

Vulnerabilities for packages: arangodb, opensearch-dashboards, gemini-cli, nextcloud-server, opensearch-dashboards-fips, prism, argo-workflows, renovate, serve, unleash-proxy, langfuse, vitess, yaml-language-server, librechat, saf, langfuse-fips...

GHSA-WH4C-J3R5-MJHP vulnerabilities

Vulnerabilities for packages: arangodb, gitlab-rails-ce, gitlab-rails-ce-fips, sqlpad, wazuh-dashboard-fips, saf, wazuh-dashboard...

CVE-2019-25367 ArangoDB Community Edition 3.4.2-1 XSS via aardvark admin interface

ArangoDB Community Edition 3.4.2-1 contains multiple cross-site scripting vulnerabilities in the Aardvark web admin interface index.html through search, user management, and API parameters. Attackers can inject scripts via parameters in /db/system/admin/aardvark/index.html to execute JavaScript i...

ArangoDB Community Edition 跨站脚本漏洞

ArangoDB Community Edition is a native multi-model database provided by the American company ArangoDB. Version 3.4.2-1 of ArangoDB Community Edition contains cross-site scripting vulnerabilities. These vulnerabilities stem from multiple cross-site scripting vulnerabilities in the search, user...