GHSA-vh5j-5fhq-9xwg: Taylor has race condition in /get-patch that allows purchase token replay

GHSA-jfj7-249r-7j2m: TabberNeue vulnerable to Stored XSS through wikitext

GHSA-m435-9v6r-v5f6: MobSF vulnerability allows SSRF due to the allow_redirects=True parameter

GHSA-fv92-fjc5-jj9h: mapstructure May Leak Sensitive Information in Logs When Processing Malformed Data

GHSA-277f-37gw-9gmq: raspap-webgui has a Directory Traversal vulnerability

orjson.loads in orjson before 3.9.15 does not limit recursion for deeply nested JSON documents.

**orjson does not limit recursion for deeply nested JSON documents**

High severity GitHub Reviewed Published Feb 26, 2024 to the GitHub Advisory Database • Updated Feb 26, 2024

Headline

GHSA-pwr2-4v36-6qpr: orjson does not limit recursion for deeply nested JSON documents

ghsa: Latest News