GHSA-x7m9-mv49-fv73: Vaultwarden vulnerable to user impersonation

GHSA-vprm-27pv-jp3w: Vaultwarden authenticated reflected cross-site scripting (XSS) vulnerability

GHSA-g5x8-v2ch-gj2g: Vaultwarden HTML injection vulnerability

GHSA-5xh2-23cc-5jc6: Strawberry GraphQL has type resolution vulnerability in node interface that allows potential data leakage through incorrect type resolution

GHSA-675f-rq2r-jw82: JWK Set's HTTP client only overwrites and appends JWK to local cache during refresh

An issue in Mezzanine v6.0.0 allows attackers to bypass access control mechanisms in the admin panel via a crafted request.

**Mezzanine allows attackers to bypass access control mechanisms**

Moderate severity GitHub Reviewed Published Feb 28, 2024 to the GitHub Advisory Database • Updated Feb 28, 2024

Headline

GHSA-qp56-82vp-xqgv: Mezzanine allows attackers to bypass access control mechanisms

ghsa: Latest News