Skip to content
OpenAdvisories

Archive

12 June 2023

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Low —

    @keystone-6/core's bundled cuid package known to be insecure

    ### Summary The `cuid` package used by `@keystone-6/*` and upstream dependencies is deprecated and [marked as insecure by the author](https://github.com/paralleldrive/cuid#status-deprecated-due-to-security-use-cuid2-instead). As reported by the author > Cuid …

  • Low 3.5

    cchetanonline WP-CopyProtect wp-copyprotect.php CopyProtect_options_page cross site scripting

    A vulnerability classified as problematic was found in cchetanonline WP-CopyProtect up to 3.0.0. This vulnerability affects the function CopyProtect_options_page of the file wp-copyprotect.php. The manipulation of the argument CopyProtect_nrc_text leads to cr…

  • Low —

    git-url-parse crate vulnerable to Regular Expression Denial of Service

    The git-url-parse crate through 0.4.4 for Rust allows Regular Expression Denial of Service (ReDos) via a crafted URL to normalize_url in lib.rs, a similar issue to CVE-2023-32758 (Python).