GHSA-3m86-c9x3-vwm9: Graylog vulnerable to privilege escalation through API tokens

GHSA-3q26-f695-pp76: @cyanheads/git-mcp-server vulnerable to command injection in several tools

GHSA-6r2x-8pq8-9489: Electron vulnerable to Heap Buffer Overflow in NativeImage

GHSA-v8fr-vxmw-6mf6: Mattermost Incorrect Authorization vulnerability

GHSA-wgvp-jj4w-88hf: Mattermost Incorrect Authorization vulnerability

Remote Code Execution vulnerability in Apache IoTDB.This issue affects Apache IoTDB: from 1.0.0 through 1.2.2.

Users are recommended to upgrade to version 1.3.0, which fixes the issue.



**Remote Code Execution vulnerability in Apache IoTDB via UDF**

Moderate severity GitHub Reviewed Published Jan 15, 2024 to the GitHub Advisory Database • Updated Jan 16, 2024

Headline

GHSA-rxgg-273w-rfw7: Remote Code Execution vulnerability in Apache IoTDB via UDF

ghsa: Latest News