GHSA-cffc-mxrf-mhh4: Picklescan is vulnerable to RCE via missing detection when calling numpy.f2py.crackfortran.param_eval

GHSA-jv8r-hv7q-p6vc: phpMyFAQ has Stored XSS in user list via admin-managed display_name

GHSA-vvxf-wj5w-6gj5: hemmelig allows SSRF Filter bypass via Secret Request functionality

GHSA-3329-ghmp-jmv5: Picklescan is vulnerable to RCE through missing detection when calling numpy.f2py.crackfortran.myeval

GHSA-x843-g5mx-g377: Picklescan is vulnerable to RCE through missing detection when calling built-in python operator.methodcaller

### Impact
Illegal access can be granted to the system.

### References
see https://sakaiproject.atlassian.net/browse/SAK-50571

**SAK-50571 Sakai Kernel users created with type roleview can login as a normal user**

Critical severity GitHub Reviewed Published Oct 14, 2024 in sakaiproject/sakai • Updated Oct 15, 2024

Headline

GHSA-cx95-q6gx-w4qp: SAK-50571 Sakai Kernel users created with type roleview can login as a normal user

Impact

References

ghsa: Latest News