GHSA-2237-5r9w-vm8j: Connect-CMS information that is restricted to viewing is visible

GHSA-5rjc-jc28-cwgg: Connect-CMS Access control vulnerability

GHSA-432c-wxpg-m4q3: xml2rfc has file inclusion irregularities

GHSA-vj7w-3m8c-6vpx: SFTPGo has insufficient sanitization of user provided rsync command

GHSA-vr5f-php7-rg24: Pimcore Admin Classic Bundle allows user enumeration

TCPDF before 6.7.4 mishandles calls that use HTML syntax.

**TCPDF Cross-site Scripting vulnerability**

Moderate severity GitHub Reviewed Published Apr 15, 2024 to the GitHub Advisory Database • Updated Apr 15, 2024

Headline

GHSA-g9wg-98c2-qv3v: TCPDF Cross-site Scripting vulnerability

ghsa: Latest News