GHSA-8495-4g3g-x7pr: aiohttp allows request smuggling due to incorrect parsing of chunk extensions

GHSA-27mf-ghqm-j3j8: aiohttp has a memory leak when middleware is enabled when requesting a resource with a non-allowed method

GHSA-jp37-5qhw-mffw: Sharks has a Bias of Polynomial Coefficients in Secret Sharing

GHSA-vggm-3478-vm5m: Graylog concurrent PDF report rendering can leak other users' reports

GHSA-7cc9-j4mv-vcjp: XXE in PHPSpreadsheet's XLSX reader

The ejs (aka Embedded JavaScript templates) package before 3.1.10 for Node.js lacks certain pollution protection.

**ejs lacks certain pollution protection**

Moderate severity GitHub Reviewed Published Apr 28, 2024 to the GitHub Advisory Database • Updated May 1, 2024

Headline

GHSA-ghr5-ch3p-vcr6: ejs lacks certain pollution protection

ghsa: Latest News