Skip to content
OpenAdvisories

Archive

15 August 2022

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Critical 10.0

    Arbitrary code execution via function parsing in react-editable-json-tree

    This library allows strings to be parsed as functions and stored as a specialized component, [`JsonFunctionValue`](https://github.com/oxyno-zeta/react-editable-json-tree/blob/09a0ca97835b0834ad054563e2fddc6f22bc5d8c/src/components/JsonFunctionValue.js). To do…

  • Critical 9.8

    Missing Critical Step in Authentication in namelessmc/nameless

    Missing Critical Step in Authentication in GitHub repository namelessmc/nameless prior to v2.0.2.

  • Critical 9.8

    Improper Removal of Sensitive Information Before Storage or Transfer in cockpit-hq/cockpit

    Improper Removal of Sensitive Information Before Storage or Transfer in GitHub repository cockpit-hq/cockpit prior to 2.2.2.