Skip to content
OpenAdvisories

Archive

4 January 2021

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • High 8.2

    XSS in mdBook's search page

    mdBook is a utility to create modern online books from Markdown files and is written in Rust. In mdBook before version 0.4.5, there is a vulnerability affecting the search feature of mdBook, which could allow an attacker to execute arbitrary JavaScript code o…

  • High 7.4

    Exposure of server configuration

    Vela is a Pipeline Automation (CI/CD) framework built on Linux container technology written in Golang. In Vela compiler before version 0.6.1 there is a vulnerability which allows exposure of server configuration. It impacts all users of Vela. An attacker can …

  • High 7.5

    Prototype Pollution

    The package asciitable.js before 1.0.3 are vulnerable to Prototype Pollution via the main function.