GHSA-c9p4-xwr9-rfhx: Zot IdP group membership revocation ignored

GHSA-cg87-wmx4-v546: KaTeX \htmlData does not validate attribute names

GHSA-v4mq-x674-ff73: AWS Cloud Development Kit (AWS CDK) IAM OIDC custom resource allows connection to unauthorized OIDC provider

GHSA-fcr8-4r9f-r66m: nbgrader's `frame-ancestors: self` grants all users access to formgrader

GHSA-8vq4-8hfp-29xh: Eugeny Tabby Sends Password Despite Host Key Verification Failure

Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component updateNullByEmptyString.

**Jeecg-boot vulnerable to SQL injection via updateNullByEmptyString**

Critical severity GitHub Reviewed Published Nov 25, 2022 • Updated Nov 30, 2022

Headline

GHSA-4j2x-v3mr-467m: Jeecg-boot vulnerable to SQL injection via updateNullByEmptyString

ghsa: Latest News