GHSA-w5rq-g9r6-vrcg: @dapperduckling/keycloak-connector-server has Reflected XSS Vulnerability in Authentication Flow URL Handling

GHSA-q4xm-6fjc-5f6w: sigstore-java has vulnerability with bundle verification

GHSA-v7vm-rhmg-8j2r: Password Policy Bypass Vulnerability in Fides Webserver User Accept Invite API

GHSA-2xcc-vm3f-m8rw: @lobehub/chat Server Side Request Forgery vulnerability

GHSA-486g-47cc-8wxf: aiocpa contains credential harvesting code

rdiffweb prior to version 2.4.9 is vulnerable to Use of Cache Containing Sensitive Information. Due to improper cache control, an attacker can view sensitive information even if they are not logged into an account. Version 2.4.9 contains a patch for this issue.

**rdiffweb vulnerable to Use of Cache Containing Sensitive Information**

Moderate severity GitHub Reviewed Published Sep 29, 2022 • Updated Sep 30, 2022

Headline

GHSA-7fqm-jm52-f9vc: rdiffweb vulnerable to Use of Cache Containing Sensitive Information

Related news

ghsa: Latest News