GHSA-486g-47cc-8wxf: aiocpa contains credential harvesting code

GHSA-93ww-43rr-79v3: Keycloak mTLS Authentication Bypass via Reverse Proxy TLS Termination 

GHSA-jgwc-jh89-rpgq: Keycloak proxy header handling Denial-of-Service (DoS) vulnerability

GHSA-xg58-75qf-9r67: Cilium's Layer 7 policy enforcement may not occur in policies with wildcarded port ranges

GHSA-qqwr-j9mm-fhw6: deno_doc's HTML generator vulnerable to Cross-site Scripting

Cross Site Scripting vulnerability in Lavalite CMS v.10.1.0 allows attackers to execute arbitrary code and obtain sensitive information via a crafted payload to the URL.

**Lavalite CMS Cross Site Scripting vulnerability**

Moderate severity GitHub Reviewed Published Apr 27, 2024 to the GitHub Advisory Database • Updated Apr 30, 2024

Headline

GHSA-5hcr-g32p-h74c: Lavalite CMS Cross Site Scripting vulnerability

ghsa: Latest News