GHSA-r7rh-jww5-5fjr: Pomerium service account access token may grant unintended access to databroker API

GHSA-mrw8-5368-phm3: Contao allows admin an account to upload SVG file containing malicious JavaScript

Improper Authentication in GitHub repository thorsten/phpmyfaq prior to 3.1.10.

**phpMyFAQ Improper Authentication vulnerability**

Moderate severity GitHub Reviewed Published Jan 16, 2023 • Updated Jan 20, 2023