GHSA-hc55-p739-j48w: @modelcontextprotocol/server-filesystem vulnerability allows for path validation bypass via colliding path prefix

GHSA-q66q-fx2p-7w4m: @modelcontextprotocol/server-filesystem allows for path validation bypass via prefix matching and symlink handling

GHSA-h34r-jxqm-qgpr: juju/utils leaks private key in certs

GHSA-xg8h-j46f-w952: Pillow vulnerability can cause write buffer overflow on BCn encoding

GHSA-3m86-c9x3-vwm9: Graylog vulnerable to privilege escalation through API tokens

Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6.

**Answer vulnerable to Cross-site Scripting**

Moderate severity GitHub Reviewed Published Mar 7, 2023 to the GitHub Advisory Database • Updated Mar 8, 2023

Headline

GHSA-h85v-cx5m-78wj: Answer vulnerable to Cross-site Scripting

Related news

ghsa: Latest News