GHSA-MXHP-79QH-MCX6 vulnerabilities

Vulnerabilities for packages: kubeflow-centraldashboard...

GHSA-R6J9-8759-G62W vulnerabilities

Vulnerabilities for packages: hadoop-fips...

GHSA-H822-R4R5-V8JG vulnerabilities

Vulnerabilities for packages: mysql...

Prototype Pollution

Overview Affected versions of mithrilare vulnerable to prototype pollution. The function parseQueryString may allow a malicious user to modify the prototype of Object, causing the addition or modification of an existing property that will exist on all objects. A payload such as...

GHSA-VX85-MJ8C-4QM6 vulnerabilities

Vulnerabilities for packages: druid, trino...

GHSA-9MXF-G3X6-WV74 vulnerabilities

Vulnerabilities for packages: hive...

Moderate severity vulnerability that affects org.keycloak:keycloak-core

Withdrawn: Duplicate of CVE-2017-12161 / GHSA-959q-32g8-vvp7...

Arbitrary JavaScript Execution

Overview A vulnerability exists in bassmaster = 1.5.1 that allows for an attacker to provide arbitrary JavaScript that is then executed server side via eval. Recommendation Update to bassmaster version 1.5.2 or greater. References - Commit b751602 - GitHub Advisory...

CVE-2023-28426

CVE-2023-28426 is rejected/not used; this CVE ID does not represent an active vulnerability entry.