GHSA-wf8f-6423-gfxg: Jackson-core Vulnerable to Memory Disclosure via Source Snippet in JsonLocation

GHSA-cwwm-hr97-qfxm: SpiceDB checks involving relations with caveats can result in no permission when permission is expected

GHSA-cvx7-x8pj-x2gw: CoreDNS Vulnerable to DoQ Memory Exhaustion via Stream Amplification

GHSA-qx7g-fx8q-545g: Para Inserts Sensitive Information into Log File for Facebook authentication

GHSA-jq8x-v7jw-v675: Duplicate Advisory: users may append `root` to group listings

### Impact
Any module can be disabled or uninstalled from back office, even with low user right.

### Patches
8.1.2

### Workarounds
none

### References


**PrestaShop allows users to uninstall modules from backoffice, even with low rights**

Moderate severity GitHub Reviewed Published Sep 28, 2023 in PrestaShop/PrestaShop • Updated Sep 28, 2023

Headline

GHSA-6jmf-2pfc-q9m7: PrestaShop allows users to uninstall modules from backoffice, even with low rights

Impact

Patches

Workarounds

References

ghsa: Latest News