GHSA-7rcc-q6rq-jpcm: DNN affected by Stored Cross-Site Scripting (XSS) in Profile Biography field

GHSA-wq2j-w9pm-7x2p: DNN allows loading unused themes on anonymous clients through query parameters

GHSA-vh3f-qppr-j97f: Mesh Connect JS SDK Vulnerable to Cross Site Scripting via createLink.openLink

GHSA-jh9h-8xf2-25wj: Liferay has a stored cross-site scripting (XSS) vulnerability via a a publication’s “Name” text field

GHSA-5w3j-gwgh-4rfv: H2O affected by a deserialization vulnerability

rack-cors (aka Rack CORS Middleware) 2.0.1 has 0666 permissions for the .rb files.

**Rack CORS Middleware has Insecure File Permissions**

Moderate severity GitHub Reviewed Published Feb 26, 2024 to the GitHub Advisory Database • Updated Feb 26, 2024

Headline

GHSA-785g-282q-pwvx: Rack CORS Middleware has Insecure File Permissions

ghsa: Latest News