GHSA-2PG8-H2J6-28XM vulnerabilities

Vulnerabilities for packages: python...

@aligent/cdk-esbuild (>=2.0.0, <=2.1.0), @aligent/cdk-graphql-mesh-server (>=0.1.5, <=2.17.0) +425 more potentially affected by unknown CVE via aws-cdk-lib (>=2.0.0, <=2.188.0)

aws-cdk-lib NPM version =2.0.0, =2.0.0, =0.1.5, =2.3.7, =2.0.1, =2.0.0, =2.0.0-beta, =0.0.3, =5.0.0-ampgenconfig.0, =2.7.0-a-cdkv2-graphql-15.0, =5.0.0-beta.0, =4.1.10-alpha.74, =3.0.0-ampgenconfig.0, =3.0.0-ampgenconfig.0, =3.1.28 and more Source cves: unknown CVE Source advisory:...

GHSA-5QJR-CJ9F-PHRX vulnerabilities

Vulnerabilities for packages: python...

GHSA-2FF7-WJQX-55GG vulnerabilities

Vulnerabilities for packages: mysql...

GHSA-39P8-4C2V-FRQ6 vulnerabilities

Vulnerabilities for packages: mysql...

GHSA-3CQ6-4846-47JH vulnerabilities

Vulnerabilities for packages: mysql...

GHSA-73W8-4H43-H886 vulnerabilities

Vulnerabilities for packages: mysql...

GHSA-QPX2-Q28H-GGCF vulnerabilities

Vulnerabilities for packages: mysql...

GHSA-MHQW-H3VX-QWWF vulnerabilities

Vulnerabilities for packages: mysql...

GHSA-582X-2262-XMHP vulnerabilities

Vulnerabilities for packages: mysql...

GHSA-R8Q7-27F9-WFGM vulnerabilities

Vulnerabilities for packages: mysql...

GHSA-8HQG-WHRW-PV92 vulnerabilities

Vulnerabilities for packages: ollama...

CVE-2024-28121 Reflex arbitrary method call in stimulus_reflex

stimulusreflex is a system to extend the capabilities of both Rails and Stimulus by intercepting user interactions and passing them to Rails over real-time websockets. In affected versions more methods than expected can be called on reflex instances. Being able to call some of them has security...

CVE-2024-28121

CVE-2024-28121 affects StimulusReflex. A websocket payload targeting a reflex can trigger arbitrary method calls on the reflex instance, because the server locates the method and uses it (via public_send) without strict validation, risking unsafe methods (e.g., instance_variable_set, system). Thi...

Data leakage between instances in the pooling allocator

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-wh6w-3828-g9qf. For more information see the GitHub-hosted security advisory...