Archive
19 October 2023
Vulnerabilities first published on this day (UTC), newest first.
2 results · Clear filters · Feed
-
Low 3.7
Unsafe rego built-in allowed in Artifact Hub
Artifact Hub is a web-based application that enables finding, installing, and publishing packages and configurations for CNCF projects. During a security audit of Artifact Hub's code base a security researcher identified a bug in which a default unsafe rego b…
-
Low 2.7
Disclosure of user names via admin bulk action views in wagtail
Wagtail is an open source content management system built on Django. A user with a limited-permission editor account for the Wagtail admin can make a direct URL request to the admin view that handles bulk actions on user accounts. While authentication rules p…