Vulnerabilities
Last updated 1 hour ago
| Package | Summary | Severity | Published | Modified |
|---|---|---|---|---|
activestorage
|
Active Storage has possible arbitrary file read and remote code execution in Active Storage variant processing | Critical 9.5 | 2 months ago | 1 month ago |
@tanstack/start-storage-context
|
Malware in @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys | Critical 9.6 | 5 months ago | 1 month ago |
|
activestorage
|
Rails Active Storage has possible Path Traversal in DiskService | High Risk 8.0 | 6 months ago | 1 month ago |
|
activestorage
|
Rails Active Storage has a possible DoS vulnerability in proxy mode via multi-range requests | Medium Risk 6.5 | 6 months ago | 1 month ago |
|
activestorage
|
Rails Active Storage has possible content type bypass via metadata in direct uploads | Medium Risk 6.0 | 6 months ago | 1 month ago |
|
activestorage
|
Rails Active Storage has a possible DoS vulnerability when in proxy mode via Range requests | Medium Risk 6.0 | 6 months ago | 1 month ago |
|
activestorage
|
Rails Active Storage has possible glob injection in its DiskService | Medium Risk 6.0 | 6 months ago | 1 month ago |
aws-sdk-kinesisvideowebrtcstorage
|
AWS SDK for Rust v1 adopted defense in depth enhancement for region parameter value | Low Risk 3.7 | 9 months ago | 1 month ago |
|
aws-sdk-storagegateway
|
AWS SDK for Rust v1 adopted defense in depth enhancement for region parameter value | Low Risk 3.7 | 9 months ago | 1 month ago |
org.keycloak:keycloak-model-storage-services
|
Keycloak Potential Variable Reference in Model Storage Services | Medium Risk 4.9 | 1 year ago | 1 month ago |
|
rage
|
rage vulnerable to malicious plugin names, recipients, or identities causing arbitrary binary execution | Medium Risk 6.0 | 1 year ago | 1 month ago |
|
activestorage
|
Rails has possible Sensitive Session Information Leak in Active Storage | Medium Risk 5.3 | 2 years ago | 1 month ago |
|
@directus/storage-driver-s3
|
Directus's S3 assets become unavailable after a burst of HEAD requests | Medium Risk 5.3 | 1 year ago | 1 month ago |
|
org.apache.camel:camel-azure-storage-blob
|
Apache Camel-Azure-Storage-Blob: the downloadBlobToFile operation built the local download target from the remote blob name without constraining it to the configured fileDir | Critical 9.1 | 1 month ago | 1 month ago |
|
org.apache.camel:camel-google-storage
|
Apache Camel-Google-Storage: the consumer appended the remote object name to the configured downloadFileName directory without constraining the result | High Risk 7.5 | 1 month ago | 1 month ago |
|
org.apache.camel:camel-azure-storage-datalake
|
Apache Camel-Azure-Storage-DataLake: the downloadToFile operation built the local download target from the remote path name without constraining it to the configured fileDir | Medium Risk 5.5 | 1 month ago | 1 month ago |
|
bpm-foundation-storage
|
Malicious code in bpm-foundation-storage (npm) | Unknown | 2 months ago | 2 months ago |
|
checkout-storage-service
|
Malicious code in checkout-storage-service (npm) | Unknown | 2 months ago | 2 months ago |
|
cardsmobile-storage
|
Malicious code in cardsmobile-storage (npm) | Unknown | 2 months ago | 2 months ago |
|
bigops-file-storage
|
Malicious code in bigops-file-storage (npm) | Unknown | 2 months ago | 2 months ago |
|
bigops-data-storage
|
Malicious code in bigops-data-storage (npm) | Unknown | 2 months ago | 2 months ago |
|
verdaccio-tarball-local-storage
|
Malicious code in verdaccio-tarball-local-storage (npm) | Unknown | 2 months ago | 2 months ago |
|
@or-sdk/key-value-storage
|
Malicious code in @or-sdk/key-value-storage (npm) | Unknown | 2 months ago | 2 months ago |
|
moving-average
|
Malicious code in moving-average (RubyGems) | Unknown | 2 years ago | 2 months ago |
|
activestorage-redundancy
|
Malicious code in activestorage-redundancy (RubyGems) | Unknown | 9 months ago | 2 months ago |
|
acmesmith_google-cloud-storage
|
Malicious code in acmesmith_google-cloud-storage (RubyGems) | Unknown | 2 years ago | 2 months ago |
azure-storage-blob
|
Microsoft: CBC Padding Oracle in Azure Blob Storage Encryption Library | Medium Risk 4.7 | 4 years ago | 3 months ago |
|
azure-storage-queue
|
Microsoft: CBC Padding Oracle in Azure Blob Storage Encryption Library | Medium Risk 4.7 | 4 years ago | 3 months ago |
azure.storage.blobs
|
Microsoft: CBC Padding Oracle in Azure Blob Storage Encryption Library | Medium Risk 4.7 | 4 years ago | 3 months ago |
|
azure.storage.queues
|
Microsoft: CBC Padding Oracle in Azure Blob Storage Encryption Library | Medium Risk 4.7 | 4 years ago | 3 months ago |
|
com.azure:azure-storage-blob
|
Microsoft: CBC Padding Oracle in Azure Blob Storage Encryption Library | Medium Risk 4.7 | 4 years ago | 3 months ago |
|
azure-storage-queue
|
Microsoft: CBC Padding Oracle in Azure Blob Storage Encryption Library | Medium Risk 4.7 | 3 months ago | 3 months ago |
|
azure-storage-blob
|
Microsoft: CBC Padding Oracle in Azure Blob Storage Encryption Library | Medium Risk 4.7 | 3 months ago | 3 months ago |
|
org.folio:mod-remote-storage
|
Hard-coded System User Credentials in Folio Data Export Spring module | Medium Risk 5.3 | 3 years ago | 3 months ago |
|
pyrage
|
pyrage vulnerable to malicious plugin names, recipients, or identities causing arbitrary binary execution | Critical 9.8 | 1 year ago | 3 months ago |
|
pyrage
|
pyrage vulnerable to malicious plugin names, recipients, or identities causing arbitrary binary execution | Critical 9.8 | 3 months ago | 3 months ago |
|
vitrage
|
OpenStack Vitrage: Unauthorized Access to the Host can Lead to Eval Injection | Critical 9.1 | 3 months ago | 3 months ago |
|
vitrage
|
OpenStack Vitrage: Unauthorized Access to the Host can Lead to Eval Injection | Critical 9.1 | 7 months ago | 3 months ago |
|
sickrage
|
No summary available | Unknown | 8 years ago | 4 months ago |
|
@doaction/storage
|
Malicious code in @doaction/storage (npm) | Unknown | 4 months ago | 4 months ago |
|
@t-in-one/application_id_storage_key_token
|
Malicious code in @t-in-one/application_id_storage_key_token (npm) | Unknown | 4 months ago | 4 months ago |
|
@t-in-one/save_application_hid_to_storage
|
Malicious code in @t-in-one/save_application_hid_to_storage (npm) | Unknown | 5 months ago | 4 months ago |
|
@t-in-one/restore_application_hid_from_storage
|
Malicious code in @t-in-one/restore_application_hid_from_storage (npm) | Unknown | 4 months ago | 4 months ago |
|
@t-in-one/safe_local_storage_token
|
Malicious code in @t-in-one/safe_local_storage_token (npm) | Unknown | 4 months ago | 4 months ago |
|
@cloudplatform-single-spa/svp-s3-storage
|
Malicious code in @cloudplatform-single-spa/svp-s3-storage (npm) | Unknown | 4 months ago | 4 months ago |
|
@tallyui/storage-sqlite
|
Malicious code in @tallyui/storage-sqlite (npm) | Unknown | 5 months ago | 4 months ago |
|
@mlspace/shared-storage
|
Malicious code in @mlspace/shared-storage (npm) | Unknown | 4 months ago | 4 months ago |
|
@car-loans/safe-storage-module
|
Malicious code in @car-loans/safe-storage-module (npm) | Unknown | 4 months ago | 4 months ago |
|
@tanstack/start-storage-context
|
Malicious code in @tanstack/start-storage-context (npm) | Unknown | 5 months ago | 4 months ago |
|
solidity-coverage-plus
|
Malicious code in solidity-coverage-plus (npm) | Unknown | 4 months ago | 4 months ago |
Page 1