GHSA-7rcc-q6rq-jpcm: DNN affected by Stored Cross-Site Scripting (XSS) in Profile Biography field

GHSA-wq2j-w9pm-7x2p: DNN allows loading unused themes on anonymous clients through query parameters

GHSA-vh3f-qppr-j97f: Mesh Connect JS SDK Vulnerable to Cross Site Scripting via createLink.openLink

GHSA-jh9h-8xf2-25wj: Liferay has a stored cross-site scripting (XSS) vulnerability via a a publication’s “Name” text field

GHSA-5w3j-gwgh-4rfv: H2O affected by a deserialization vulnerability

orjson.loads in orjson before 3.9.15 does not limit recursion for deeply nested JSON documents.

**orjson does not limit recursion for deeply nested JSON documents**

High severity GitHub Reviewed Published Feb 26, 2024 to the GitHub Advisory Database • Updated Feb 26, 2024

Headline

GHSA-pwr2-4v36-6qpr: orjson does not limit recursion for deeply nested JSON documents

ghsa: Latest News