GHSA-w5rq-g9r6-vrcg: @dapperduckling/keycloak-connector-server has Reflected XSS Vulnerability in Authentication Flow URL Handling

GHSA-q4xm-6fjc-5f6w: sigstore-java has vulnerability with bundle verification

GHSA-v7vm-rhmg-8j2r: Password Policy Bypass Vulnerability in Fides Webserver User Accept Invite API

GHSA-2xcc-vm3f-m8rw: @lobehub/chat Server Side Request Forgery vulnerability

GHSA-486g-47cc-8wxf: aiocpa contains credential harvesting code

Cross-Site Request Forgery (CSRF) in GitHub repository snipe/snipe-it prior to v.6.2.3.

**Cross-Site Request Forgery (CSRF) in snipe/snipe-it**

Moderate severity GitHub Reviewed Published Oct 11, 2023 to the GitHub Advisory Database • Updated Oct 11, 2023

Headline

GHSA-33vj-r6p6-x4p8: Cross-Site Request Forgery (CSRF) in snipe/snipe-it

Related news

ghsa: Latest News