GHSA-53q7-4874-24qg: Information Disclosure Vulnerability in Privacy Center of SERVER_SIDE_FIDES_API_URL

GHSA-gxrv-wf35-62w9: Bypassing IP allow-lists in traefik via HTTP/3 early data requests in QUIC 0-RTT handshakes

GHSA-m9gv-6p22-qgmj: ai-controller-frontend payment status in basket isn't reset

GHSA-fqpg-rq76-99pq: Panic in Pipeline when PgConn is busy or closed in github.com/jackc/pgx

GHSA-p9cg-vqcc-grcx: Server Side Request Forgery (SSRF) attack in Fedify

In mongo-express 1.0.2, /admin allows CSRF, as demonstrated by deletion of a Collection.

**mongo-express Cross-site Request Forgery vulnerability**

Moderate severity GitHub Reviewed Published Mar 1, 2024 to the GitHub Advisory Database • Updated Mar 1, 2024

Headline

GHSA-fffg-cwc9-xvj7: mongo-express Cross-site Request Forgery vulnerability

ghsa: Latest News