GHSA-qqwr-j9mm-fhw6: deno_doc's HTML generator vulnerable to Cross-site Scripting

GHSA-v7gv-xpgf-6395: Keycloak Build Process Exposes Sensitive Data

GHSA-5545-r4hg-rj4m: Keycloak Path Traversal Vulnerability Due to External Control of File Name or Path

GHSA-qpgc-w4mg-6v92: MLflow's excessive directory permissions allow local privilege escalation

GHSA-3864-rp2m-2qfj: libre-chat Path Traversal vulnerability

In Plotly plotly.js before 2.25.2, plot API calls have a risk of __proto__ being polluted in expandObjectPaths or nestedProperty.

**plotly.js prototype pollution vulnerability**

Critical severity GitHub Reviewed Published Jan 3, 2024 to the GitHub Advisory Database • Updated Jan 3, 2024

Headline

GHSA-wjc4-73q6-gv3m: plotly.js prototype pollution vulnerability

ghsa: Latest News