Skip to content
OpenAdvisories

Archive

19 October 2023

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Low 3.7

    Unsafe rego built-in allowed in Artifact Hub

    Artifact Hub is a web-based application that enables finding, installing, and publishing packages and configurations for CNCF projects. During a security audit of Artifact Hub's code base a security researcher identified a bug in which a default unsafe rego b…

  • Low 2.7

    Disclosure of user names via admin bulk action views in wagtail

    Wagtail is an open source content management system built on Django. A user with a limited-permission editor account for the Wagtail admin can make a direct URL request to the admin view that handles bulk actions on user accounts. While authentication rules p…