Skip to content
OpenAdvisories

Archive

14 June 2019

Vulnerabilities first published on this day (UTC), newest first.

← May 2019 2019 / June /14 July 2019 →
  1. 11
  2. 24
  3. 396
  4. 436
  5. 5167
  6. 657
  7. 779
  8. 8 
  9. 9 
  10. 1023
  11. 1145
  12. 12126
  13. 1345
  14. 1449
  15. 158
  16. 161
  17. 1770
  18. 1850
  19. 1995
  20. 2056
  21. 2125
  22. 22 
  23. 233
  24. 2430
  25. 2526
  26. 2635
  27. 27108
  28. 2829
  29. 2915
  30. 3024
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 10.0
    GHSA-4vmm-mhcq-4x9j

    Sandbox Bypass Leading to Arbitrary Code Execution in constantinople

    Versions of `constantinople` prior to 3.1.1 are vulnerable to a sandbox bypass which can lead to arbitrary code execution. ## Recommendation Update to version 3.1.1 or later.

    constantinople npm
  • Critical —
    GHSA-4qhx-g9wp-g9m6

    Failure to sanitize quotes which can lead to sql injection in squel

    All versions of `squel` are vulnerable to sql injection. The `squel` package does not properly escape user provided input when provided using the `setFields` method. This could lead to sql injection if the query was then executed. Proof of concept demonstrati…

    squel npm