Security
Headlines
HeadlinesLatestCVEs

Headline

CVE-2022-2027: 🔒 fixes three critical stored XSS vulnerabilities thanks @saharshtapi… · kromitgmbh/titra@e606b67

Improper Neutralization of Formula Elements in a CSV File in GitHub repository kromitgmbh/titra prior to 0.77.0.

CVE
#xss#vulnerability#js#git

@@ -11,6 +11,7 @@ import { numberWithUserPrecision, getUserSetting, getUserTimeUnitVerbose, addToolTipToTableCell, } from ‘…/…/utils/frontend_helpers’ import { i18nReady, t } from ‘…/…/utils/i18n.js’ import { dailyTimecardMapper } from ‘…/…/utils/server_method_helpers’ @@ -68,8 +69,18 @@ Template.dailytimetable.onRendered(() => { width: 1, compareValue: (cell, keyword) => [dayjs(cell, getGlobalSetting(‘dateformat’)).toDate(), dayjs(keyword, getGlobalSetting(‘dateformat’)).toDate()], }, { name: t(‘globals.project’), editable: false, width: 2 }, { name: t(‘globals.resource’), editable: false, width: 2 }, { name: t(‘globals.project’), editable: false, width: 2, format: addToolTipToTableCell, }, { name: t(‘globals.resource’), editable: false, width: 2, format: addToolTipToTableCell, }, { name: getUserTimeUnitVerbose(), editable: false,

CVE: Latest News

CVE-2023-50976: Transactions API Authorization by oleiman · Pull Request #14969 · redpanda-data/redpanda
CVE-2023-6905
CVE-2023-6903
CVE-2023-6904
CVE-2023-3907