GHSA-cwjm-3f7h-9hwq: Traefik's ACME TLS-ALPN fast path lacks timeouts and close on handshake stall

GHSA-rwr8-xrpw-9qf5: solspace/craft-freeform Exposed to Known Axios Vulnerabilities via Precompiled Assets

GHSA-44jg-mv3h-wj6g: solspace/craft-freeform Vulnerable to XSS in `PhpSpreadsheet` HTML Writer Due to Unsanitized Styling Data

GHSA-g2pg-6438-jwpf: devalue vulnerable to denial of service due to memory/CPU exhaustion in devalue.parse

GHSA-cphf-4846-3xx9: Vert.x Web static handler component cache can be manipulated to deny the access to static files

Improper Verification of Source of a Communication Channel in GitHub repository usememos/memos 0.9.0 and prior.

**usememos/memos vulnerable to Improper Verification of Source of a Communication Channel**

High severity GitHub Reviewed Published Dec 29, 2022 • Updated Dec 30, 2022

Headline

GHSA-vh43-cc6x-prpr: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel

ghsa: Latest News