GHSA-pjwm-cr36-mwv3: ReDoS in giskard's transformation.py (GHSL-2024-324)

GHSA-j3vq-pmp5-r5xj: Missing ratelimit on passwrod resets in zenml

GHSA-j3px-q95c-9683: zlib-rs stack overflow during decompression with malicious input

GHSA-p2h2-3vg9-4p87: Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer

GHSA-hff8-hjwv-j9q7: Remote Code Execution on click of <a> Link in markdown preview

SQL injection vulnerability in jeecg-boot version 3.5.3, allows remote attackers to escalate privileges and obtain sensitive information via the jmreport/qurestSql component.

**Jeecg Boot SQL injection vulnerability**

Moderate severity GitHub Reviewed Published Dec 30, 2023 to the GitHub Advisory Database • Updated Jan 3, 2024

Headline

GHSA-5v9r-788c-wc8p: Jeecg Boot SQL injection vulnerability

ghsa: Latest News