OSV - Open Source Vulnerabilities

GHSA-pjp7-q6wp-97qx

Maven/org.geonetwork-opensource:geonetwork

core-geonetwork has an Open Redirect Bypass

3 days ago

Fix available
Severity - 4.8 (Medium)

GHSA-93wv-jw9v-4972

Maven/io.netty:netty-codec-http2

Netty: HTTP/2 decompression leaks ByteBuf reference count when the decompressor channel is already closed (Direct memory leak / OOM DoS)

3 days ago

Fix available
Severity - 7.5 (High)

GHSA-88fw-v6x4-3f58

Maven/org.springframework.data:spring-data-commons

Spring Data: Unbounded property-path cache keyed by externally-supplied path string

3 days ago

Fix available
Severity - 7.5 (High)

GHSA-rwqx-fvqh-6wm4

Maven/io.opentelemetry.javaagent:opentelemetry-javaagent

OpenTelemetry Java Instrumentation: JDBC Auto-Instrumentation Logging Clear-Text Passwords

5 days ago

Fix available
Severity - 6.5 (Medium)

GHSA-fq3f-m5qm-99f5

Maven/io.opentelemetry.javaagent:opentelemetry-javaagent

OpenTelemetry Javaagent RMI context propagation allows resource exhaustion

5 days ago

Fix available
Severity - 5.3 (Medium)

GHSA-qcxp-gm7m-4j5v

Maven/io.quarkus:quarkus-vertx-http

Quarkus: Authentication/Authorization Bypass via Advanced Path Normalization Vulnerabilities

5 days ago

Fix available
Severity - 7.5 (High)

GHSA-7c26-995w-6f47

Maven/org.verapdf:parser

veraPDF Parser DoS via PostScript Type 1 Font Programs

5 days ago

Fix available
Severity - 6.9 (Medium)

GHSA-jrmc-qg6p-94fp

Maven/org.verapdf:parser

veraPDF Parser DoS via PostScript CMap Streams

5 days ago

Fix available
Severity - 6.9 (Medium)

GHSA-cg9x-g3gm-h5h6

Maven/org.verapdf:validation-model
Maven/org.verapdf:validation-model-jakarta

veraPDF-validatio: Use of Default `DocumentBuilderFactory` leads to XXE When Processing Untrusted PDFs

5 days ago

Fix available
Severity - 6.5 (Medium)

GHSA-3jh7-wm29-q568

Maven/org.verapdf:validation-model
Maven/org.verapdf:validation-model-jakarta

veraPDF Validation XXE via Rich Text

5 days ago

Fix available
Severity - 8.7 (High)

GHSA-36mm-w85j-3q2j

Maven/org.verapdf:validation-model
Maven/org.verapdf:validation-model-jakarta

veraPDF Validation XXE via XFA

5 days ago

Fix available
Severity - 8.7 (High)

GHSA-85rg-p3fr-xc2f

Maven/com.quietterminal:qti-neon
PyPI/qti-neon
npm/qti-neon

QTINeon has unauthenticated relay-to-host amplification via unbounded RECONNECT_REQUEST forwarding

6 days ago

No fix available
Severity - 8.6 (High)

GHSA-4r9r-4425-74p7

Maven/com.cedarpolicy:cedar-java

Cedar-Java has policy injection, type confusion, and incorrect equality comparison vulnerabilities

6 days ago

Fix available
Severity - 8.8 (High)

GHSA-28f5-38xr-jh2w

Maven/io.appium:java-client

java-client Allows Network Pivot via Unvalidated directConnect Redirect in AppiumCommandExecutor

6 days ago

Fix available
Severity - 8.2 (High)

GHSA-4j38-rw27-97gx

Maven/org.xwiki.contrib:discussions-server

org.xwiki.contrib:discussions-server has Cross-Site Request Forgery (CSRF) issue that makes it possible to delete messages

27 Jul

Fix available
Severity - 6.5 (Medium)

GHSA-fp43-vj7g-pg92

Maven/org.omnifaces:omnifaces

OmniFaces: Forged combined-resource IDs and related output/push boundaries

24 Jul

Fix available
Severity - 7.5 (High)