GHSA-wwqv-p2pp-99h5: LangGraph Checkpoint affected by RCE in "json" mode of JsonPlusSerializer 

GHSA-x4qj-2f4q-r4rx: Parse Server Vulnerable to Server-Side Request Forgery (SSRF) in File Upload via URI Format

GHSA-cpf4-pmr4-w6cx: IDOR Vulnerabilities in ZITADEL's Organization API allows Cross-Tenant Data Tempering

GHSA-gr35-vpx2-qxhc: Weblate leaks the IP of project member inviting user to be reviewer in Audit log

GHSA-vf95-55w6-qmrf: youki container escape and denial of service due to arbitrary write gadgets and procfs write redirects

An XML External Entity (XXE) vulnerability in ureport v2.2.9 allows attackers to execute arbitrary code via uploading a crafted XML file to /ureport/designer/saveReportFile.

**XML External Entity Reference in ureport**

High severity GitHub Reviewed Published Feb 14, 2023 to the GitHub Advisory Database • Updated Feb 14, 2023

Headline

GHSA-fhj6-gr87-g4cj: XML External Entity Reference in ureport

ghsa: Latest News