GHSA-95m2-chm4-mq7m: PHP-Textile has persistent XSS vulnerability in image link handling

GHSA-2r2v-9pf8-6342: WireGuard Portal v2 Vulnerable to OAuth Insecure Redirect URI / Account Takeover

GHSA-r5vf-wf4h-82gg: matrix-sdk-crypto missing facility to signal rotation of a verified cryptographic identity

GHSA-f27p-cmv8-xhm6: fetch: Authorization headers not dropped when redirecting cross-origin

GHSA-2p95-8xvm-2pjx: REDAXO CMS Cross-site Scripting vulnerability

 Vega is vulnerable to arbitrary code execution when clicking href links. Versions 5.4.1 and 4.5.1 contain a patch.

**Vega vulnerable to arbitrary code execution when clicking href links**

Moderate severity GitHub Reviewed Published Mar 2, 2023 in vega/vega • Updated Mar 2, 2023

Headline

GHSA-cp47-r258-q626: Vega vulnerable to arbitrary code execution when clicking href links

ghsa: Latest News