# Vulnerabilities published in 2023


- [GHSA-wxf3-4fvj-vqqx](https://insights.sbomify.com/GHSA-wxf3-4fvj-vqqx/): Unsafe plugins can be installed via pack import by tenant admins (not scored)
- [GHSA-wvc4-j7g5-4f79](https://insights.sbomify.com/GHSA-wvc4-j7g5-4f79/): NATS TLS certificate common name validation bypass (not scored)
- [GHSA-wqm8-jx8r-8rcq](https://insights.sbomify.com/GHSA-wqm8-jx8r-8rcq/): Cross-site scripting vulnerabilities in old version of bundled TinyMCE (not scored)
- [GHSA-wqcr-xm43-hpqr](https://insights.sbomify.com/GHSA-wqcr-xm43-hpqr/): Vulnerable version of libwebp and can be exploited with a malicious source image (not scored)
- [GHSA-wm8x-php5-hvq6](https://insights.sbomify.com/GHSA-wm8x-php5-hvq6/): Maligned causes incorrect deallocation (not scored)
- [GHSA-wm63-7627-ch33](https://insights.sbomify.com/GHSA-wm63-7627-ch33/): @vendure/core's insecure currencyCode handling allows wrong payment amounts (not scored)
- [GHSA-wjfc-pgfp-pv9c](https://insights.sbomify.com/GHSA-wjfc-pgfp-pv9c/): Improper Input Validation in nyholm/psr7 (not scored)
- [GHSA-wj7f-468m-6mv8](https://insights.sbomify.com/GHSA-wj7f-468m-6mv8/): Environment variables still accessible through /proc (not scored)
- [GHSA-wfg4-322g-9vqv](https://insights.sbomify.com/GHSA-wfg4-322g-9vqv/): memoffset allows reading uninitialized memory (not scored)
- [GHSA-w9mr-28mw-j8hg](https://insights.sbomify.com/GHSA-w9mr-28mw-j8hg/): Hop-by-hop abuse to malform header mutator (not scored)
- [GHSA-w98g-5fmx-wm4x](https://insights.sbomify.com/GHSA-w98g-5fmx-wm4x/): pocketmine/raklib reliable-ordered queue size is unlimited, allowing a session to hog server memory (not scored)
- [GHSA-w7hm-hmxv-pvhf](https://insights.sbomify.com/GHSA-w7hm-hmxv-pvhf/): HPACK decoder panics on invalid input (not scored)
- [GHSA-w6rp-vxj2-fjhr](https://insights.sbomify.com/GHSA-w6rp-vxj2-fjhr/): Cosmos packet-forward-middleware vulnerable to chain-halt (not scored)
- [GHSA-w5w5-2882-47pc](https://insights.sbomify.com/GHSA-w5w5-2882-47pc/): github.com/cosmos/cosmos-sdk's x/crisis does not charge ConstantFee (not scored)
- [GHSA-w4x6-hh3x-wjrx](https://insights.sbomify.com/GHSA-w4x6-hh3x-wjrx/): Stale copy of the public suffix list (not scored)
- [GHSA-vx74-f528-fxqg](https://insights.sbomify.com/GHSA-vx74-f528-fxqg/): github.com/nghttp2/nghttp2 has HTTP/2 Rapid Reset (not scored)
- [GHSA-v8gr-m533-ghj9](https://insights.sbomify.com/GHSA-v8gr-m533-ghj9/): Vulnerable OpenSSL included in cryptography wheels (not scored)
- [GHSA-v7hc-87jc-qrrr](https://insights.sbomify.com/GHSA-v7hc-87jc-qrrr/): Impact The eventing-github cluster-local server doesn't set `ReadHeaderTimeout`‬‭ which could lead do a DDoS‬ ‭attack, where a large gro (not scored)
- [GHSA-v6xp-ccvx-w52m](https://insights.sbomify.com/GHSA-v6xp-ccvx-w52m/): Json response for search reveals Solr credentials (not scored)
- [GHSA-rrwm-8wqm-gwgv](https://insights.sbomify.com/GHSA-rrwm-8wqm-gwgv/): Cross-site Scripting (XSS) - stored in Print Documents (not scored)
- [GHSA-rqr8-pxh7-cq3g](https://insights.sbomify.com/GHSA-rqr8-pxh7-cq3g/): Ethereum ABI decoder DoS when parsing ZST (not scored)
- [GHSA-rm8v-mxj3-5rmq](https://insights.sbomify.com/GHSA-rm8v-mxj3-5rmq/): github.com/lestrrat-go/jwx vulnerable to Potential Padding Oracle Attack (not scored)
- [GHSA-rjjm-x32p-m3f7](https://insights.sbomify.com/GHSA-rjjm-x32p-m3f7/): gnark's range checker gadget allows wider inputs up to word alignment (not scored)
- [GHSA-rfhg-rjfp-9q8q](https://insights.sbomify.com/GHSA-rfhg-rjfp-9q8q/): Potential denial of service after connection migration (not scored)
- [GHSA-rcx8-48pc-v9q8](https://insights.sbomify.com/GHSA-rcx8-48pc-v9q8/): mail-internals use-after-free vulnerability in `vec_insert_bytes` (not scored)
- [GHSA-rc4v-99cr-pjcm](https://insights.sbomify.com/GHSA-rc4v-99cr-pjcm/): Prototype Pollution in ali-security/mongoose (not scored)
- [GHSA-r68h-jhhj-9jvm](https://insights.sbomify.com/GHSA-r68h-jhhj-9jvm/): Validator.isValidSafeHTML is being deprecated and will be deleted from org.owasp.esapi:esapi in 1 year (not scored)
- [GHSA-r3hf-q8q7-fv2p](https://insights.sbomify.com/GHSA-r3hf-q8q7-fv2p/): Angular critical CSS inlining Cross-site Scripting Vulnerability Advisory (not scored)
- [GHSA-r3fg-3r88-6x3f](https://insights.sbomify.com/GHSA-r3fg-3r88-6x3f/): Ibexa User Settings are accessible on the front-end for anonymous user (not scored)
- [GHSA-r2xv-vpr2-42m9](https://insights.sbomify.com/GHSA-r2xv-vpr2-42m9/): slsa-verifier vulnerable to mproper validation of npm's publish attestations (not scored)
- [GHSA-r2h5-3hgw-8j34](https://insights.sbomify.com/GHSA-r2h5-3hgw-8j34/): User data in TPM attestation vulnerable to MITM (not scored)
- [GHSA-r24f-hg58-vfrw](https://insights.sbomify.com/GHSA-r24f-hg58-vfrw/): unsafe-libyaml unaligned write of u64 on 32-bit and 16-bit platforms (not scored)
- [GHSA-qxh3-jgvh-x55j](https://insights.sbomify.com/GHSA-qxh3-jgvh-x55j/): Connect-CMS Privilege Escalation Vulnerability (not scored)
- [GHSA-qvqg-6rp8-4p9h](https://insights.sbomify.com/GHSA-qvqg-6rp8-4p9h/): github.com/ipfs/kubo affected by DOS Bitswap unbounded persistent memory leak (not scored)
- [GHSA-qvc4-78gw-pv8p](https://insights.sbomify.com/GHSA-qvc4-78gw-pv8p/): Adverserial use of `make_bitflags!` macro can cause undefined behavior (not scored)
- [GHSA-qfc5-6r3j-jj22](https://insights.sbomify.com/GHSA-qfc5-6r3j-jj22/): Go package github.com/cosmos/cosmos-sdk module x/crisis does NOT cause chain halt (not scored)
- [GHSA-qf87-q4gg-cg43](https://insights.sbomify.com/GHSA-qf87-q4gg-cg43/): bottlerocket dependency openssl is vulnerable to dereferenced null pointers (not scored)
- [GHSA-q95j-488q-5q3p](https://insights.sbomify.com/GHSA-q95j-488q-5q3p/): Apiman Manager API affected by Jackson denial of service vulnerability (not scored)
- [GHSA-q95h-cqrv-8jv5](https://insights.sbomify.com/GHSA-q95h-cqrv-8jv5/): ExifTool vulnerable to arbitrary code execution (not scored)
- [GHSA-q79m-c546-2g63](https://insights.sbomify.com/GHSA-q79m-c546-2g63/): CakePHP vulnerable to Denial of Service attack through XML payloads (not scored)
- [GHSA-q4pp-j36h-3gqg](https://insights.sbomify.com/GHSA-q4pp-j36h-3gqg/): Minimal `basti` IAM Policy Allows Shell Access (not scored)
- [GHSA-pxqj-xrv5-qvjf](https://insights.sbomify.com/GHSA-pxqj-xrv5-qvjf/): XML-RPC for PHP's debugger vulnerable to possible XSS attack (not scored)
- [GHSA-pqpw-89w5-82v5](https://insights.sbomify.com/GHSA-pqpw-89w5-82v5/): `simd-json-derive` vulnerable to `MaybeUninit` misuse (not scored)
- [GHSA-ppjr-267j-5p9x](https://insights.sbomify.com/GHSA-ppjr-267j-5p9x/): NULL pointer dereference in `stb_image` (not scored)
- [GHSA-pjjw-qhg8-p2p9](https://insights.sbomify.com/GHSA-pjjw-qhg8-p2p9/): aiohttp has vulnerable dependency that is vulnerable to request smuggling (not scored)
- [GHSA-pj34-fpw3-83qj](https://insights.sbomify.com/GHSA-pj34-fpw3-83qj/): bottlerocket dependency openssl is vulnerable to read buffer overflow via X.509 verification (not scored)
- [GHSA-pgjv-jrg2-gq3v](https://insights.sbomify.com/GHSA-pgjv-jrg2-gq3v/): dompurify vulnerable to Cross-site Scripting (not scored)
- [GHSA-pffg-92cg-xf5c](https://insights.sbomify.com/GHSA-pffg-92cg-xf5c/): gnark-crypto's exponentiation in the pairing target group GT using GLV can give incorrect results (not scored)
- [GHSA-p76f-wr22-4rv6](https://insights.sbomify.com/GHSA-p76f-wr22-4rv6/): CakePHP vulnerable to Remote File Inclusion through View template name manipulation (not scored)
- [GHSA-p2gm-ffr3-w2xw](https://insights.sbomify.com/GHSA-p2gm-ffr3-w2xw/): Nervos CKB vulnerable to low-resource flood DDoS attacks through network message (not scored)
- [GHSA-mvrp-3cvx-c325](https://insights.sbomify.com/GHSA-mvrp-3cvx-c325/): Zod denial of service vulnerability during email validation (not scored)
- [GHSA-mrrw-grhq-86gf](https://insights.sbomify.com/GHSA-mrrw-grhq-86gf/): Ascii allows out-of-bounds array indexing in safe code (not scored)
- [GHSA-mrr8-v49w-3333](https://insights.sbomify.com/GHSA-mrr8-v49w-3333/): sweetalert2 contains potentially undesirable behavior (not scored)
- [GHSA-mhgm-52vg-pvvc](https://insights.sbomify.com/GHSA-mhgm-52vg-pvvc/): Privilege escalation in Strongbox (not scored)
- [GHSA-mgc4-wqv7-4pxm](https://insights.sbomify.com/GHSA-mgc4-wqv7-4pxm/): SwiftNIO vulnerable to HTTP request smuggling using malformed Transfer-Encoding header (not scored)
- [GHSA-mc8h-8q98-g5hr](https://insights.sbomify.com/GHSA-mc8h-8q98-g5hr/): Race Condition Enabling Link Following and Time-of-check Time-of-use (TOCTOU) (not scored)
- [GHSA-m95x-m25c-w9mp](https://insights.sbomify.com/GHSA-m95x-m25c-w9mp/): XML-RPC for PHP allows access to local files via malicious argument to the Client::send method (not scored)
- [GHSA-m8fw-p3cr-6jqc](https://insights.sbomify.com/GHSA-m8fw-p3cr-6jqc/): Cross-Site Scripting in CKEditor4 WordCount Plugin (not scored)
- [GHSA-jxcx-3h54-qqxx](https://insights.sbomify.com/GHSA-jxcx-3h54-qqxx/): SilverStripe CMS Cross-site Scripting vulnerabilities inherited from TinyMCE (not scored)
- [GHSA-jq35-85cj-fj4p](https://insights.sbomify.com/GHSA-jq35-85cj-fj4p/): /sys/devices/virtual/powercap accessible by default to containers (not scored)
- [GHSA-jm77-qphf-c4w8](https://insights.sbomify.com/GHSA-jm77-qphf-c4w8/): pyca/cryptography's wheels include vulnerable OpenSSL (not scored)
- [GHSA-jjgp-whrp-gq8m](https://insights.sbomify.com/GHSA-jjgp-whrp-gq8m/): in-toto: PGP trust model not (fully) considered (not scored)
- [GHSA-jgvc-jfgh-rjvv](https://insights.sbomify.com/GHSA-jgvc-jfgh-rjvv/): Chosen Ciphertext Attack in Jose4j (not scored)
- [GHSA-jcr6-4frq-9gjj](https://insights.sbomify.com/GHSA-jcr6-4frq-9gjj/): Users vulnerable to unaligned read of `*const *const c_char` pointer (not scored)
- [GHSA-j9q2-f9q7-jhgq](https://insights.sbomify.com/GHSA-j9q2-f9q7-jhgq/): CakePHP SecurityComponent cross form submission issue (not scored)
- [GHSA-j859-pmrq-9q6c](https://insights.sbomify.com/GHSA-j859-pmrq-9q6c/): bottlerocket dependency openssl has a double free vulnerability (not scored)
- [GHSA-j79x-vvgm-w73w](https://insights.sbomify.com/GHSA-j79x-vvgm-w73w/): bottlerocket dependency openssl provides streaming of ASN.1 data via a BIO (not scored)
- [GHSA-j646-gj5p-p45g](https://insights.sbomify.com/GHSA-j646-gj5p-p45g/): CefSharp affected by heap buffer overflow in WebP (not scored)
- [GHSA-j5g3-5c8r-7qfx](https://insights.sbomify.com/GHSA-j5g3-5c8r-7qfx/): Prevent logging invalid header values (not scored)
- [GHSA-j57r-4qw6-58r3](https://insights.sbomify.com/GHSA-j57r-4qw6-58r3/): rusty_paseto vulnerable to private key extraction due to ed25519-dalek dependency (not scored)
- [GHSA-j4g3-3q8x-jxqp](https://insights.sbomify.com/GHSA-j4g3-3q8x-jxqp/): dbt-core's secret env vars written to package-lock.json in plaintext (not scored)
- [GHSA-j3rq-4xjw-xg63](https://insights.sbomify.com/GHSA-j3rq-4xjw-xg63/): Go package github.com/edgelesssys/marblerun CLI commands susceptible to MITM attacks (not scored)
- [GHSA-j2cr-jc39-wpx5](https://insights.sbomify.com/GHSA-j2cr-jc39-wpx5/): Barberry Security Advisory - regarding x/auth periodic vesting accounts (not scored)
- [GHSA-hxq4-mx37-fqvg](https://insights.sbomify.com/GHSA-hxq4-mx37-fqvg/): s2n-quic potential denial of service vulnerability when receiving empty UDP packets (not scored)
- [GHSA-hxp2-xqf3-v83h](https://insights.sbomify.com/GHSA-hxp2-xqf3-v83h/): Panic during unmarshal of Hello Verify Request in github.com/pion/dtls/v2 (not scored)
- [GHSA-hw6r-g8gj-2987](https://insights.sbomify.com/GHSA-hw6r-g8gj-2987/): Actions expression injection in `filter-test-configs` (`GHSL-2023-181`) (not scored)
- [GHSA-hq58-p9mv-338c](https://insights.sbomify.com/GHSA-hq58-p9mv-338c/): Amulet Security Advisory for CometBFT: ASA-2023-002 **Component**: CometBFT **Criticality:** Low **Affected versions:** All **Affected us (not scored)
- [GHSA-hj8m-9fhf-v7jp](https://insights.sbomify.com/GHSA-hj8m-9fhf-v7jp/): fief-server Server-Side Template Injection vulnerability (not scored)
- [GHSA-hfxh-rjv7-2369](https://insights.sbomify.com/GHSA-hfxh-rjv7-2369/): Uptime Kuma Authenticated remote code execution via TailscalePing (not scored)
- [GHSA-hfmc-7525-mj55](https://insights.sbomify.com/GHSA-hfmc-7525-mj55/): AsyncSSH vulnerable to Prefix Truncation Attack (a.k.a. Terrapin Attack) against ChaCha20-Poly1305 and Encrypt-then-MAC (not scored)
- [GHSA-hc5c-r8m5-2gfh](https://insights.sbomify.com/GHSA-hc5c-r8m5-2gfh/): plone.restapi vulnerable to Stored Cross Site Scripting with SVG image in user portrait (not scored)
- [GHSA-h9wq-xcqx-mqxm](https://insights.sbomify.com/GHSA-h9wq-xcqx-mqxm/): Vendure Cross Site Request Forgery vulnerability impacting all API requests (not scored)
- [GHSA-h6p3-p4vx-wr8q](https://insights.sbomify.com/GHSA-h6p3-p4vx-wr8q/): dompurify vulnerable to Cross-site Scripting (not scored)
- [GHSA-h24c-6p6p-m3vx](https://insights.sbomify.com/GHSA-h24c-6p6p-m3vx/): tss-lib leaks secret keys in response to incorrectly constructed Paillier moduli (not scored)
- [GHSA-gv2c-5g79-h73c](https://insights.sbomify.com/GHSA-gv2c-5g79-h73c/): Ibexa ezplatform-kernel download route allows filename change (not scored)
- [GHSA-gpv5-7x3g-ghjv](https://insights.sbomify.com/GHSA-gpv5-7x3g-ghjv/): fast-xml-parser regex vulnerability patch could be improved from a safety perspective (not scored)
- [GHSA-gm68-572p-q28r](https://insights.sbomify.com/GHSA-gm68-572p-q28r/): @vendure/admin-ui-plugin authenticated Cross-site Scripting vulnerability (not scored)
- [GHSA-ghc8-5cgm-5rpf](https://insights.sbomify.com/GHSA-ghc8-5cgm-5rpf/): Inventory fails to prohibit standard library access prior to initialization of Rust standard library runtime (not scored)
- [GHSA-gch5-hwqf-mxhp](https://insights.sbomify.com/GHSA-gch5-hwqf-mxhp/): Unsoundness in `intern` methods on `intaglio` symbol interners (not scored)
- [GHSA-g95c-xc83-8353](https://insights.sbomify.com/GHSA-g95c-xc83-8353/): Ibexa DXP Download route allows filename change (not scored)
- [GHSA-g753-ghr7-q33w](https://insights.sbomify.com/GHSA-g753-ghr7-q33w/): cyfs-base vulnerable to misaligned pointer dereference in `ChunkId::new` (not scored)
- [GHSA-g6w6-h933-4rc5](https://insights.sbomify.com/GHSA-g6w6-h933-4rc5/): Soketi was exposed to Sandbox Escape vulnerability via vm2 (not scored)
- [GHSA-g3j5-mpp2-2fqm](https://insights.sbomify.com/GHSA-g3j5-mpp2-2fqm/): symfont/process typosquatting malware spoofs symfony/process (not scored)
- [GHSA-g35x-j6jj-8g7j](https://insights.sbomify.com/GHSA-g35x-j6jj-8g7j/): @mittwald/kubernetes's secret contents leaked via debug logging (not scored)
- [GHSA-fwj4-72fm-c93g](https://insights.sbomify.com/GHSA-fwj4-72fm-c93g/): Under-validated ComSpec and cmd.exe resolution in Mutagen projects (not scored)
- [GHSA-fq33-vmhv-48xh](https://insights.sbomify.com/GHSA-fq33-vmhv-48xh/): ntru-rs has unsound FFI: Wrong API usage causes write past allocated area (not scored)
- [GHSA-fjx5-qpf4-xjf2](https://insights.sbomify.com/GHSA-fjx5-qpf4-xjf2/): Parsing borsh messages with ZST which are not-copy/clone is unsound (not scored)
- [GHSA-fjj4-2q73-jvgc](https://insights.sbomify.com/GHSA-fjj4-2q73-jvgc/): Nervos CKB calculation of program load cycles may be missed when executing in resume mode (not scored)
- [GHSA-f9pm-4g9p-6vm3](https://insights.sbomify.com/GHSA-f9pm-4g9p-6vm3/): Bundled libwebp in pywebp vulnerable (not scored)
- [GHSA-f9g6-fp84-fv92](https://insights.sbomify.com/GHSA-f9g6-fp84-fv92/): impl `FromMdbValue` for bool is unsound (not scored)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/121/