GHSA-456v-f425-8mcv: PiranhaCMS stored XSS

GHSA-qr9h-x63w-vqfm: OpenMLS improper persistence of the secret tree during message processing

GHSA-98f8-j56x-2hh4: Duplicate Advisory: SurrealDB is Vulnerable to Unauthorized Data Exposure via LIVE Query Subscriptions

GHSA-q6hv-wcjr-wp8h: kcp is missing update validation allows arbitrary LogicalCluster status patches through initializingworkspaces Virtual Workspace

GHSA-w87v-7w53-wwxv: Apollo Embedded Sandbox and Explorer vulnerable to CSRF via window.postMessage origin-validation bypass

Kwik commit 745fd4e2 does not discard unused encryption keys.

**Kwik does not discard unused encryption keys**

Moderate severity GitHub Reviewed Published May 24, 2024 to the GitHub Advisory Database • Updated May 24, 2024

Headline

GHSA-w8cp-frxc-55pj: Kwik does not discard unused encryption keys

ghsa: Latest News