mirror of
https://github.com/norandom/OpenUltraSAST.git
synced 2026-10-16 03:49:26 +00:00
Marius Ciepluch
1ae41eea19
Regex inventory stays the proposer. MAP attaches promote/demote/unadjudicated/coverage from intra-file taint (tree-sitter when a grammar parses, Python ast as last resort). Deep sandboxes promotions only, ordered by the existing heuristic ranker plus optional OpenRouter mechanism recall. The SAST pair slice scores overlay outcomes; the stage-1 detection gate and local pair gate stay inventory-only.
39 KiB
39 KiB
| 1 | id | project_slug | cve_id | cwe_id | cwe_name | github_username | github_repository_name | github_tag | github_url | advisory_id | buggy_commit_id | fix_commit_ids |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2 | 1 | DSpace__DSpace_CVE-2016-10726_4.4 | CVE-2016-10726 | CWE-022 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | DSpace | DSpace | 4.4 | https://github.com/DSpace/DSpace | GHSA-4m9r-5gqp-7j82 | ca4c86b1baa4e0b07975b1da86a34a6e7170b3b7 | 4239abd2dd2ae0dedd7edc95a5c9f264fdcf639d |
| 3 | 2 | perwendel__spark_CVE-2018-9159_2.7.1 | CVE-2018-9159 | CWE-022 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | perwendel | spark | 2.7.1 | https://github.com/perwendel/spark | GHSA-76qr-mmh8-cp8f | 5316c0d0f057daaf556c3907c20df975f7bf8a8a | 030e9d00125cbd1ad759668f85488aba1019c668;a221a864db28eb736d36041df2fa6eb8839fc5cd;ce9e11517eca69e58ed4378d1e47a02bd06863cc |
| 4 | 3 | perwendel__spark_CVE-2016-9177_2.5.1 | CVE-2016-9177 | CWE-022 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | perwendel | spark | 2.5.1 | https://github.com/perwendel/spark | GHSA-89gc-6cw6-4vch | ce57dfb949ed183405f75dee8cf3262b45c9b3b5 | efcb46c710e3f56805b9257a63d1306882f4faf9 |
| 5 | 4 | wildfly__wildfly_CVE-2018-1047_11.0.0.Final | CVE-2018-1047 | CWE-022 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | wildfly | wildfly | 11.0.0.Final | https://github.com/wildfly/wildfly | GHSA-fmr4-w67p-vh8x | 4fd7bffaf2ee73201910684f2674aa1bced7fe81 | 735c77ce8b3bab6aa5072fb8575dc96db52d01ab;21c358acf0b06f38ec46034404c7a3d0bbbc132d;9ff55ed2da845a6f604b2edd1bc3bd311f1b776c |
| 6 | 5 | vert-x3__vertx-web_CVE-2018-12542_3.5.3.CR1 | CVE-2018-12542 | CWE-022 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | vert-x3 | vertx-web | 3.5.3.CR1 | https://github.com/vert-x3/vertx-web | GHSA-h39x-m55c-v55h | 3fe3873cc28b4d833c90f8989ff797a7b463da2c | 57a65dce6f4c5aa5e3ce7288685e7f3447eb8f3b |
| 7 | 6 | apache__camel_CVE-2018-8041_2.20.3 | CVE-2018-8041 | CWE-022 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | apache | camel | 2.20.3 | https://github.com/apache/camel | GHSA-jv74-f9pj-xp3f | 32bfda73ddd1ea8576bcb53dac496af9e0825f1a | 4580e4d6c65cfd544c1791c824b5819477c583cc;4f401c09d22c45c94fa97746dc31905e06b19e3;63c7c080de4d18f9ceb25843508710df2c2c6d4;a0d25d9582c6ee85e9567fa39413df0b4f02ef7 |
| 8 | 7 | dromara__hutool_CVE-2018-17297_4.1.11 | CVE-2018-17297 | CWE-022 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | dromara | hutool | 4.1.11 | https://github.com/dromara/hutool | GHSA-rhq2-2574-78mc | 7687720c5125b29386d3bb9c7c2931da79664b73 | 8d7d0b7fb5ea4f7447b40131bffc1ec506a6528e |
| 9 | 8 | apache__tika_CVE-2018-11762_1.18 | CVE-2018-11762 | CWE-022 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | apache | tika | 1.18 | https://github.com/apache/tika | GHSA-w6g3-v46q-5p28 | 38ff2a986af24ee255f1f91d654ea402f4016696 | a09d853dbed712f644e274b497cce254f3189d57;5c78eb78893fa077a4e58be4484eab4717667d52 |
| 10 | 9 | square__retrofit_CVE-2018-1000850_2.4.0 | CVE-2018-1000850 | CWE-022 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | square | retrofit | 2.4.0 | https://github.com/square/retrofit | GHSA-8p8g-f9vg-r7xr | 7158698314daa138e993fac6a590ed19d78a8599 | b9a7f6ad72073ddd40254c0058710e87a073047d |
| 11 | 10 | apache__jspwiki_CVE-2019-0225_2.11.0.M2 | CVE-2019-0225 | CWE-022 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | apache | jspwiki | 2.11.0.M2 | https://github.com/apache/jspwiki | GHSA-pffw-p2q5-w6vh | d48bcef107a14dd07ecd830ab817b8df796082a4 | 88d89d6523802c044cfcb7930cba40d8eeb21da2 |
| 12 | 11 | apache__camel_CVE-2019-0194_2.21.4 | CVE-2019-0194 | CWE-022 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | apache | camel | 2.21.4 | https://github.com/apache/camel | GHSA-4wjq-69rc-8wcp | 757bc836d1d9ed11d11de73c5dc72fc53617d6a0 | 5b64969d37cf2906efd4623cfd473041ce5132fd |
| 13 | 12 | asf__tapestry-5_CVE-2019-0207_5.4.4 | CVE-2019-0207 | CWE-022 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | apache | tapestry-5 | 5.4.4 | https://github.com/apache/tapestry-5 | GHSA-89r3-rcpj-h7w6 | d29cc6778eb0c75e45139274005bba1c4f58907f | 6dd7219fd4707467a36091e2f7f5f6460c619099 |
| 14 | 13 | spring-cloud__spring-cloud-config_CVE-2020-5410_2.1.8.RELEASE | CVE-2020-5410 | CWE-022 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | spring-cloud | spring-cloud-config | 2.1.8.RELEASE | https://github.com/spring-cloud/spring-cloud-config | GHSA-32xf-jwmv-9hf3 | 91843a9ddc7489275b679568bfce1e4c37af71e1 | 03eaadc25323d8c8c89f528e8585033ed90c50f6 |
| 15 | 14 | spring-cloud__spring-cloud-config_CVE-2020-5405_2.1.6.RELEASE | CVE-2020-5405 | CWE-022 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | spring-cloud | spring-cloud-config | 2.1.6.RELEASE | https://github.com/spring-cloud/spring-cloud-config | GHSA-g86w-v5vg-9gxf | 24e7292e5930367396461354d3f9d8ba8b94771c | 651f458919c40ef9a5e93e7d76bf98575910fad0 |
| 16 | 15 | apache__rocketmq_CVE-2019-17572_4.6.0 | CVE-2019-17572 | CWE-022 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | apache | rocketmq | 4.6.0 | https://github.com/apache/rocketmq | GHSA-5x3v-2gxr-59m2 | d1b4e47c26576cf4fa543bbdd8c6f09643220bed | f8f6fbe4aa7f5dee937e688322628c366b12a552 |
| 17 | 16 | joniles__mpxj_CVE-2020-35460_8.3.4 | CVE-2020-35460 | CWE-022 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | joniles | mpxj | 8.3.4 | https://github.com/joniles/mpxj | GHSA-p9j6-4pjr-gp48 | 87ea0ba33e901b87c95a18e3703ac51b59e2ee04 | 8eaf4225048ea5ba7e59ef4556dab2098fcc4a1d |
| 18 | 17 | apache__flink_CVE-2020-17519_1.11.2 | CVE-2020-17519 | CWE-022 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | apache | flink | 1.11.2 | https://github.com/apache/flink | GHSA-395w-qhqr-9fr6 | fe3613574f76201a8d55d572a639a4ce7e18a9db | b561010b0ee741543c3953306037f00d7a9f0801 |
| 19 | 18 | kubernetes-client__java_CVE-2020-8570_client-java-parent-9.0.1 | CVE-2020-8570 | CWE-022 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | kubernetes-client | java | client-java-parent-9.0.1 | https://github.com/kubernetes-client/java | GHSA-cghx-9gcr-r42x | 796c74f4244cacd90d99393640ccaad0c72f8893 | 858316ae8bc1145005a0310e1f65f95d2389a589 |
| 20 | 19 | asf__commons-io_CVE-2021-29425_2.6 | CVE-2021-29425 | CWE-022 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | apache | commons-io | 2.6 | https://github.com/apache/commons-io | GHSA-gwrp-pvrq-jmwv | 2ae025fe5c4a7d2046c53072b0898e37a079fe62 | fe7543eee5cd4b2f9e78aa44c31031b68eba204d |
| 21 | 20 | asf__karaf_CVE-2022-22932_4.3.5 | CVE-2022-22932 | CWE-022 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | apache | karaf | 4.3.5 | https://github.com/apache/karaf | GHSA-544x-2jx9-4pfg | d0439e5b0dde1c7e3ff0207c557aa701093acd25 | 36a2bc4 |
| 22 | 21 | asf__james-project_CVE-2022-22931_3.6.0 | CVE-2022-22931 | CWE-022 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | apache | james-project | 3.6.0 | https://github.com/apache/james-project | GHSA-v84g-cf5j-xjqx | 34f9b0b52ab8c84378d3a34ac43a0fef5aa4e8fe | 8f9512637d374ccdf84d61617a2878557bf07532 |
| 23 | 22 | vert-x3__vertx-web_CVE-2019-17640_3.9.3 | CVE-2019-17640 | CWE-022 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | vert-x3 | vertx-web | 3.9.3 | https://github.com/vert-x3/vertx-web | GHSA-vjw7-6gfq-6wf5 | 2146b7240096e25b40bb1acc083fa7ec79330989 | b12f7c4c6576a8adc3f683b2899de4b0e7d099e4 |
| 24 | 23 | ESAPI__esapi-java-legacy_CVE-2022-23457_2.2.3.1 | CVE-2022-23457 | CWE-022 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | ESAPI | esapi-java-legacy | 2.2.3.1 | https://github.com/ESAPI/esapi-java-legacy | GHSA-8m5h-hrqm-pxm2 | 2e8694c6beb3bdbb2645b882eba72ce41bc63242 | a0d67b75593878b1b6e39e2acc1773b3effedb2a |
| 25 | 24 | xwiki__xwiki-commons_CVE-2022-24897_12.6.6 | CVE-2022-24897 | CWE-022 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | xwiki | xwiki-commons | 12.6.6 | https://github.com/xwiki/xwiki-commons | GHSA-cvx5-m8vg-vxgc | 4f33e1efd74016fa9eb31b3c2fcd01bc6becd551 | 215951cfb0f808d0bf5b1097c9e7d1e503449ab8 |
| 26 | 25 | srikanth-lingala__zip4j_CVE-2018-1002202_1.3.2 | CVE-2018-1002202 | CWE-022 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | srikanth-lingala | zip4j | 1.3.2 | https://github.com/iris-sast/zip4j | GHSA-2rpm-4x8c-pvqg | d87ffa2d64ffb3a0a1cf0c7a69c7b19d7015bfde | 59aeea594ff885e06c25751dc6334dfea1bed8c6 |
| 27 | 26 | alibaba__one-java-agent_CVE-2022-25842_0.0.1 | CVE-2022-25842 | CWE-022 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | alibaba | one-java-agent | 0.0.1 | https://github.com/alibaba/one-java-agent | GHSA-9hr3-j9mc-xmq2 | b911af2bb779917c84a016350700745dc31c642a | 359603b63fc6c59d8b57e061c171954bab3433bf;e0149bb36488fede2a12cb1ab3c2095e56dd7571 |
| 28 | 27 | apache__myfaces_CVE-2011-4367_2.0.11 | CVE-2011-4367 | CWE-022 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | apache | myfaces | 2.0.11 | https://github.com/apache/myfaces | GHSA-gjfx-9wx3-j6r7 | bedac49daffc3cb792fa19884620af01ab5a01ab | 236cd211327c557825c7fce091bcc68f57a88e8e;99ef1250ca3e28213e85eac14817e1ff93fc9e6a;c07c3bf93ad0e0cf530ddece0642783f1553ad89;9e7e996a4ef83c4d8e673ee6e4431348e598e031;b9b2e00bb53d3eb435256c5a140b83f7d6251b55 |
| 29 | 28 | undertow-io__undertow_CVE-2014-7816_1.0.16.Final | CVE-2014-7816 | CWE-022 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | undertow-io | undertow | 1.0.16.Final | https://github.com/undertow-io/undertow | GHSA-h6p6-fc4w-cqhx | 4aa98c80fa9962235c94f8666c30793d0018f95d | 28f244e63f558ba99a197813cfd5eee461b52b4c |
| 30 | 29 | jeremylong__DependencyCheck_CVE-2018-12036_3.1.2 | CVE-2018-12036 | CWE-022 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | jeremylong | DependencyCheck | 3.1.2 | https://github.com/jeremylong/DependencyCheck | GHSA-hcwx-7q5v-vc67 | c3b5b3c0d7fe7283b4cd421149d6fb620476f67d | c106ca919aa343b95cca0ffff0a0b5dc20b2baf7 |
| 31 | 30 | codehaus-plexus__plexus-archiver_CVE-2018-1002200_3.5 | CVE-2018-1002200 | CWE-022 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | codehaus-plexus | plexus-archiver | 3.5 | https://github.com/codehaus-plexus/plexus-archiver | GHSA-hcxq-x77q-3469 | b9f9a425865eb47fb3665b3144ee4ca11f402704 | f8f4233508193b70df33759ae9dc6154d69c2ea8 |
| 32 | 31 | zeroturnaround__zt-zip_CVE-2018-1002201_1.12 | CVE-2018-1002201 | CWE-022 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | zeroturnaround | zt-zip | 1.12 | https://github.com/zeroturnaround/zt-zip | GHSA-qcf3-9vmh-xw4r | bd3f3d77f3709f901fd5180a493ef32e4dfebfa6 | 759b72f33bc8f4d69f84f09fcb7f010ad45d6fff |
| 33 | 32 | whitesource__curekit_CVE-2022-23082_1.1.3 | CVE-2022-23082 | CWE-022 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | whitesource | CureKit | 1.1.3 | https://github.com/whitesource/CureKit | GHSA-m9vj-44f3-78xw | 7b275a67a5992165deb186b2b3f7764ddd062d26 | af35e870ed09411d2f1fae6db1b04598cd1a31b6 |
| 34 | 33 | aws__aws-sdk-java_CVE-2022-31159_1.12.260 | CVE-2022-31159 | CWE-022 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | aws | aws-sdk-java | 1.12.260 | https://github.com/aws/aws-sdk-java | GHSA-c28r-hw5m-5gv3 | 5555d847a882d4c3094b00ac7cec21a16cf01a3e | cb66c50c885566d9a7fce837a68dc48ddced8a9a |
| 35 | 34 | jlangch__venice_CVE-2022-36007_1.10.16 | CVE-2022-36007 | CWE-022 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | jlangch | venice | 1.10.16 | https://github.com/jlangch/venice | GHSA-4mmh-5vw7-rgvj | 9306c93686100a6bc52ad0c8cb617ed199b5f75c | 215ae91bb964013b0a2d70718a692832d561ae0a;c942c73136333bc493050910f171a48e6f575b23 |
| 36 | 35 | DSpace__DSpace_CVE-2022-31195_5.10 | CVE-2022-31195 | CWE-022 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | DSpace | DSpace | 5.10 | https://github.com/DSpace/DSpace | GHSA-8rmh-55h4-93h5 | eca7968be7d6b9f8f5f302c9fc09f8186ed4809e | 56e76049185bbd87c994128a9d77735ad7af0199;7af52a0883a9dbc475cf3001f04ed11b24c8a4c0 |
| 37 | 36 | payara__Payara_CVE-2022-37422_5.2022.2 | CVE-2022-37422 | CWE-022 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | payara | Payara | 5.2022.2 | https://github.com/payara/Payara | GHSA-h28c-453m-h9xm | 7680990e55c04d628f16a591f950a2b3a4dcb401 | 6490d4918c65ba6df8344424cb9b8ab583d90b1a |
| 38 | 37 | DSpace__DSpace_CVE-2022-31194_5.10 | CVE-2022-31194 | CWE-022 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | DSpace | DSpace | 5.10 | https://github.com/DSpace/DSpace | GHSA-qp5m-c3m9-8q2p | eca7968be7d6b9f8f5f302c9fc09f8186ed4809e | 7569c6374aefeafb996e202cf8d631020eda5f24;d1dd7d23329ef055069759df15cfa200c8e3 |
| 39 | 38 | diffplug__goomph_CVE-2022-26049_3.37.1 | CVE-2022-26049 | CWE-022 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | diffplug | goomph | 3.37.1 | https://github.com/diffplug/goomph | GHSA-p2f7-9cv7-jjf6 | fe2083196f0d0a75885aea402baaa972254173d5 | 25f04f67ba62d9a14104bee13a0a0f2517afb8c8 |
| 40 | 39 | apache__dolphinscheduler_CVE-2022-26884_2.0.5 | CVE-2022-26884 | CWE-022 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | apache | dolphinscheduler | 2.0.5 | https://github.com/apache/dolphinscheduler | GHSA-vpgf-fgm8-gxr2 | f31328276c12821c21d1ce07e824bc74146c19b2 | 9717da6c255414eaef1c9ac943b0eb8989c1a85d |
| 41 | 40 | apache__dolphinscheduler_CVE-2022-34662_2.0.9 | CVE-2022-34662 | CWE-022 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | apache | dolphinscheduler | 2.0.9 | https://github.com/apache/dolphinscheduler | GHSA-fp35-xrrr-3gph | 23302054559410093573fb169336bafeb02db97f | 63f835715f8ca8bff79c0e7177ebfa5917ebb3bd |
| 42 | 41 | testng-team__testng_CVE-2022-4065_7.5 | CVE-2022-4065 | CWE-022 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | cbeust | testng | 7.5 | https://github.com/cbeust/testng | GHSA-rc2q-x9mf-w3vf | d8adcef70a9e0b8fcef5eab92ca87a8d398cfb89 | 9150736cd2c123a6a3b60e6193630859f9f0422b |
| 43 | 42 | apache__uima-uimaj_CVE-2022-32287_3.3.0 | CVE-2022-32287 | CWE-022 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | apache | uima-uimaj | 3.3.0 | https://github.com/apache/uima-uimaj | GHSA-xgqr-5wqw-9fpv | f1f557a415ae38e383bf050587a510211515c21d | 1088f615154b385dd163965b8d2ef78e87111ab1 |
| 44 | 43 | keycloak__keycloak_CVE-2022-3782_20.0.1 | CVE-2022-3782 | CWE-022 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | keycloak | keycloak | 20.0.1 | https://github.com/keycloak/keycloak | GHSA-g8q8-fggx-9r3q | cce8ee2b1ab7c925bfbb62d8f12a33e93d943040 | da8d61616399d5c4e4c470c16dd6b0bd98f2b656 |
| 45 | 44 | eclipse-ee4j__glassfish_CVE-2022-2712_6.2.5 | CVE-2022-2712 | CWE-022 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | eclipse-ee4j | glassfish | 6.2.5 | https://github.com/eclipse-ee4j/glassfish | GHSA-3g5w-6pw7-6hrp | 0159b68b362c7f4be78d1fa75aeaf2ec0b997f1d | 6982a7ca7e7fb9f02276dc12ab61832daf4002bd |
| 46 | 45 | hapifhir__org.hl7.fhir.core_CVE-2023-24057_5.6.91 | CVE-2023-24057 | CWE-022 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | hapifhir | org.hl7.fhir.core | 5.6.91 | https://github.com/hapifhir/org.hl7.fhir.core | GHSA-jqh6-9574-5x22 | 7b22d0355b1b12448e50b9cbfe2a8ae63f2ee828 | b50aec59124416b7315a49220cfc3999223414cc |
| 47 | 46 | hapifhir__org.hl7.fhir.core_CVE-2023-28465_5.6.105 | CVE-2023-28465 | CWE-022 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | hapifhir | org.hl7.fhir.core | 5.6.105 | https://github.com/hapifhir/org.hl7.fhir.core | GHSA-9654-pr4f-gh6m | 0b8e2c39841b51def04e29d3b745602517602d5b | 909f7e64fea6532a00b3eb8904bf620fc3cae6d1 |
| 48 | 47 | Graylog2__graylog2-server_CVE-2023-41044_5.1.2 | CVE-2023-41044 | CWE-022 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | Graylog2 | graylog2-server | 5.1.2 | https://github.com/Graylog2/graylog2-server | GHSA-2q4p-f6gf-mqr5 | d970230b6f3ecb83e07dd43df56428d1421c40e9 | 02b8792e6f4b829f0c1d87fcbf2d58b73458b938 |
| 49 | 48 | apache__mina-sshd_CVE-2023-35887_2.9.2 | CVE-2023-35887 | CWE-022 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | apache | mina-sshd | 2.9.2 | https://github.com/apache/mina-sshd | GHSA-mjmq-gwgm-5qhm | fbbbb7b6af7fdf1765f297a96dfec3f198f5fd7d | 10de190e7d3f9189deb76b8d08c72334a1fe2df0;a61e93035f06bff8fc622ad94870fb773d48b9f0;c20739b43aab0f7bf2ccad982a6cb37b9d5a8a0b |
| 50 | 49 | apache__shiro_CVE-2023-34478_1.11.0 | CVE-2023-34478 | CWE-022 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | apache | shiro | 1.11.0 | https://github.com/apache/shiro | GHSA-pmhc-2g4f-85cg | adb56c885210eeca710b2df17f6b3aeda85e4f35 | c3ede3f94efb442acb0795714a022c2c121d1da0 |
| 51 | 50 | codehaus-plexus__plexus-archiver_CVE-2023-37460_4.7.1 | CVE-2023-37460 | CWE-022 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | codehaus-plexus | plexus-archiver | 4.7.1 | https://github.com/codehaus-plexus/plexus-archiver | GHSA-wh3p-fphp-9h2m | e7cbadba1b5c78192677da95b355dd790f3a4535 | 54759839fbdf85caf8442076f001d5fd64e0dcb2 |
| 52 | 51 | codehaus-plexus__plexus-utils_CVE-2022-4244_3.0.23 | CVE-2022-4244 | CWE-022 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | codehaus-plexus | plexus-utils | 3.0.23 | https://github.com/codehaus-plexus/plexus-utils | GHSA-g6ph-x5wf-g337 | 6176f91bb843eecddac857591ed20bda38e01470 | 33a2853df8185b4519b1b8bfae284f03392618ef |
| 53 | 52 | yamcs__yamcs_CVE-2023-45278_5.8.6 | CVE-2023-45278 | CWE-022 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | yamcs | yamcs | 5.8.6 | https://github.com/yamcs/yamcs | GHSA-43fw-536j-w37j | 9443a67d2aeda20fb73f68c5d571b515d68c05e4 | b6db35e432e62fdff0447cf513369f0b8a848abf |
| 54 | 53 | yamcs__yamcs_CVE-2023-45277_5.8.6 | CVE-2023-45277 | CWE-022 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | yamcs | yamcs | 5.8.6 | https://github.com/yamcs/yamcs | GHSA-w4m2-qmh3-2g8f | 9443a67d2aeda20fb73f68c5d571b515d68c05e4 | b6db35e432e62fdff0447cf513369f0b8a848abf |
| 55 | 54 | apache__shiro_CVE-2023-46749_1.12.0 | CVE-2023-46749 | CWE-022 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | apache | shiro | 1.12.0 | https://github.com/apache/shiro | GHSA-jc7h-c423-mpjc | c8a294ab32b29a6e9d4b03bbaa6bae11c42daea1 | 8400d08d5eac0bc4fae99d28c5adc82dd8a86eda |
| 56 | 55 | apache__sling-org-apache-sling-servlets-resolver_CVE-2024-23673_2.10.0 | CVE-2024-23673 | CWE-022 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | apache | sling-org-apache-sling-servlets-resolver | 2.10.0 | https://github.com/apache/sling-org-apache-sling-servlets-resolver | GHSA-h2rq-qhr7-53gm | cb80c5e80144fcd9f6ac283ffb564f3b863cfbb2 | b54d4e6693e0bcd63a97a0328f4f065b8a81b75e |
| 57 | 56 | x-stream__xstream_CVE-2013-7285_1.4.6 | CVE-2013-7285 | CWE-078 | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') | x-stream | xstream | 1.4.6 | https://github.com/x-stream/xstream | GHSA-f554-x222-wgf7 | 768c6e417a75e7732fc591bee844e5e81af56a7d | 6344867dce6767af7d0fe34fb393271a6456672d |
| 58 | 57 | x-stream__xstream_CVE-2020-26217_1.4.14-java7 | CVE-2020-26217 | CWE-078 | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') | x-stream | xstream | 1.4.14-java7 | https://github.com/x-stream/xstream | GHSA-mw36-7c6c-q4q2 | d03f6987b793fac71ab89a31d7aa633c366c5289 | 0fec095d534126931c99fd38e9c6d41f5c685c1a |
| 59 | 58 | x-stream__xstream_CVE-2021-21345_1.4.15 | CVE-2021-21345 | CWE-078 | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') | x-stream | xstream | 1.4.15 | https://github.com/x-stream/xstream | GHSA-hwpc-8xqv-jvj4 | f04bbec461f2c2a6f1e2cf41770f42c64aae24a4 | d5e51177634afea7213b9dc2d21f101d2e258db9 |
| 60 | 59 | jenkinsci__docker-commons-plugin_CVE-2022-20617_1.17 | CVE-2022-20617 | CWE-078 | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') | jenkinsci | docker-commons-plugin | 1.17 | https://github.com/jenkinsci/docker-commons-plugin | GHSA-jpxj-vgq5-prjc | 2f0fda49452a7653c33de24220c908786f1aa405 | c069b79c31c5aa80a01b0c462f0dc6b41751f059 |
| 61 | 60 | jenkinsci__workflow-cps-plugin_CVE-2022-25173_2646.v6ed3b5b01ff1 | CVE-2022-25173 | CWE-078 | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') | jenkinsci | workflow-cps-plugin | 2646.v6ed3b5b01ff1 | https://github.com/jenkinsci/workflow-cps-plugin | GHSA-4m7p-55jm-3vwv | 6ed3b5b01ff16dc4f6f9f4b209dbc21394b13913 | f7ae7b75a457976853539bff1db52373b85fdb85 |
| 62 | 61 | jenkinsci__workflow-cps-global-lib-plugin_CVE-2022-25174_544.vff04fa68714d | CVE-2022-25174 | CWE-078 | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') | jenkinsci | workflow-cps-global-lib-plugin | 544.vff04fa68714d | https://github.com/jenkinsci/workflow-cps-global-lib-plugin | GHSA-g9fx-6j5c-grmw | ff04fa68714d2cc277e8a87512461bdf3a39e186 | ace0de3c2d691662021ea10306eeb407da6b6365 |
| 63 | 62 | jenkinsci__workflow-multibranch-plugin_CVE-2022-25175_706.vd43c65dec013 | CVE-2022-25175 | CWE-078 | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') | jenkinsci | workflow-multibranch-plugin | 706.vd43c65dec013 | https://github.com/jenkinsci/workflow-multibranch-plugin | GHSA-pj84-qjm3-77mg | d43c65dec013812b084fecbb4a310d856eb6b89a | 71c3f0a6ccdb2ba43f43686826b0d62160df85e8 |
| 64 | 63 | apache__activemq_CVE-2014-3576_5.10.1 | CVE-2014-3576 | CWE-078 | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') | apache | activemq | 5.10.1 | https://github.com/apache/activemq | GHSA-3wfj-vh84-732p | 8938d14d434447193b02ba635606aa0fb7a80353 | f07e6a53216f9388185ac2b39f366f3bfd6a8a55 |
| 65 | 64 | codehaus-plexus__plexus-utils_CVE-2017-1000487_3.0.15 | CVE-2017-1000487 | CWE-078 | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') | codehaus-plexus | plexus-utils | 3.0.15 | https://github.com/codehaus-plexus/plexus-utils | GHSA-8vhq-qq4p-grq3 | 3b271b43f9e5021b4232fc2ffdfb4e469c7f8685 | b38a1b3a4352303e4312b2bb601a0d7ec6e28f41 |
| 66 | 65 | jenkinsci__git-client-plugin_CVE-2019-10392_2.8.4 | CVE-2019-10392 | CWE-078 | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') | jenkinsci | git-client-plugin | 2.8.4 | https://github.com/jenkinsci/git-client-plugin | GHSA-hw6x-2qwv-rxr7 | 72add81da4cbeabc95504ebdb9007d47ac1c2b0b | 899123fa2eb9dd2c37137aae630c47c6be6b4b02 |
| 67 | 66 | jenkinsci__perfecto-plugin_CVE-2020-2261_1.17 | CVE-2020-2261 | CWE-078 | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') | jenkinsci | perfecto-plugin | 1.17 | https://github.com/jenkinsci/perfecto-plugin | GHSA-jq84-6fmm-6qv6 | adabcd9da98628e063bb91198e30ff39a34dc921 | 52c09ad2e26416211e4009b095c4f16508b27b8a |
| 68 | 67 | apache__nifi_CVE-2022-33140_1.16.2 | CVE-2022-33140 | CWE-078 | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') | apache | nifi | 1.16.2 | https://github.com/apache/nifi | GHSA-77hf-23pq-2g7c | 06f04958272dafc30ce357c4c4edcaf470050b52 | a1306a19f78e11c2d809e9aef24336669461403a |
| 69 | 68 | jenkinsci__script-security-plugin_CVE-2023-24422_1228.vd93135a_2fb_25 | CVE-2023-24422 | CWE-078 | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') | jenkinsci | script-security-plugin | 1228.vd93135a_2fb_25 | https://github.com/jenkinsci/script-security-plugin | GHSA-76qj-9gwh-pvv3 | d93135a2fb250c04cc361b0bb1efd809bc63ad08 | 4880bbe905a6783d80150c8b881d0127430d4a73 |
| 70 | 69 | nahsra__antisamy_CVE-2016-10006_1.5.3 | CVE-2016-10006 | CWE-079 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | nahsra | antisamy | 1.5.3 | https://github.com/nahsra/antisamy | GHSA-683w-6h9j-57wq | 8bebe1eb2ec1ac23e34111e9d06024d7dab7fa25 | 90550e42b39972fce0db4bcab0e1ce4359b94661;7313931dc3c0d1377b010f07faef2063dd359a36;5f4982e95f1894669550bb3f6a639573dd4e3756;5a783b4116a21a12ab10f57cd1c88616902af633 |
| 71 | 70 | nahsra__antisamy_CVE-2017-14735_1.5.6 | CVE-2017-14735 | CWE-079 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | nahsra | antisamy | 1.5.6 | https://github.com/nahsra/antisamy | GHSA-q44v-xc3g-v7jq | 1369d4c904e1f021d3616580daf9e1d8e43e0ddb | 82da009e733a989a57190cd6aa1b6824724f6d36 |
| 72 | 71 | apache__jspwiki_CVE-2019-10077_2.11.0.M3 | CVE-2019-10077 | CWE-079 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | apache | jspwiki | 2.11.0.M3 | https://github.com/apache/jspwiki | GHSA-cj6j-32rg-45r2 | 2ea7973c1c7fdf2771a9743dbc8ecb27c9bb162d | 87c89f0405d6b31fc165358ce5d5bc4536e32a8a |
| 73 | 72 | apache__jspwiki_CVE-2019-10076_2.11.0.M3 | CVE-2019-10076 | CWE-079 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | apache | jspwiki | 2.11.0.M3 | https://github.com/apache/jspwiki | GHSA-cxx2-fp39-rf3r | 2ea7973c1c7fdf2771a9743dbc8ecb27c9bb162d | 60a9cb84ce36a0392fa5a01afcf28c11857c2f9e |
| 74 | 73 | apache__jspwiki_CVE-2019-10078_2.11.0.M3 | CVE-2019-10078 | CWE-079 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | apache | jspwiki | 2.11.0.M3 | https://github.com/apache/jspwiki | GHSA-hp5r-mhgp-56c9 | 2ea7973c1c7fdf2771a9743dbc8ecb27c9bb162d | 46cd981dfb431730da3f9249f5db858aacf11e52 |
| 75 | 74 | apache__jspwiki_CVE-2019-10089_2.11.0.M4 | CVE-2019-10089 | CWE-079 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | apache | jspwiki | 2.11.0.M4 | https://github.com/apache/jspwiki | GHSA-3rx2-x6mx-grj3 | 6e1dc66adf3faa22e7f1f60189611a3d8ddb0726 | 2956ccb307dd4b23b25c8ddeae8d7e7b301c6ff3 |
| 76 | 75 | hibernate__hibernate-validator_CVE-2019-10219_6.0.17.Final | CVE-2019-10219 | CWE-079 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | hibernate | hibernate-validator | 6.0.17.Final | https://github.com/hibernate/hibernate-validator | GHSA-m8p2-495h-ccmh | 7694cff9ed6325006382390c9bb2d8e4f3efedb6 | 124b7dd6d9a4ad24d4d49f74701f05a13e56ceee;20d729548511ac5cff6fd459f93de137195420fe |
| 77 | 76 | asf__cxf_CVE-2019-17573_3.2.11 | CVE-2019-17573 | CWE-079 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | apache | cxf | 3.2.11 | https://github.com/apache/cxf | GHSA-f93p-f762-vr53 | da2d27d97f9e9abd7d307e2224e5e0338b767ee2 | a02e96ba1095596bef481919f16a90c5e80a92c8 |
| 78 | 77 | xuxueli__xxl-job_CVE-2020-29204_2.2.0 | CVE-2020-29204 | CWE-079 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | xuxueli | xxl-job | 2.2.0 | https://github.com/xuxueli/xxl-job | GHSA-wc73-w5r9-x9pc | 1874c4854f81d6af4a9471d3fe111cdbf713f336 | 227628567354d3c156951009d683c6fec3006e0e |
| 79 | 78 | OWASP__json-sanitizer_CVE-2020-13973_1.2.0 | CVE-2020-13973 | CWE-079 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | OWASP | json-sanitizer | 1.2.0 | https://github.com/OWASP/json-sanitizer | GHSA-g8jj-899q-8x3j | bb41f80ad575cb90ea6535976d7c17accb4b4c87 | f3512bab078af3f5c533dacc2d410add8c0c1124 |
| 80 | 79 | eclipse__hawkbit_CVE-2020-27219_0.3.0M6 | CVE-2020-27219 | CWE-079 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | eclipse | hawkbit | 0.3.0M6 | https://github.com/eclipse/hawkbit | GHSA-rcvx-rmvf-mxch | f3659f01425ad0162f92fa73357f8c507058bcb2 | 94b7c12cde1b38eda5414bd88d6d068008cfb9f9 |
| 81 | 80 | alibaba__nacos_CVE-2021-44667_2.0.3 | CVE-2021-44667 | CWE-079 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | alibaba | nacos | 2.0.3 | https://github.com/alibaba/nacos | GHSA-4gr7-qw2q-jxh6 | 5a4d433970be9b8402f57e65bffa497027f21e30 | cd6d7e33b94f24814701f3faf8b632e5e85444c5 |
| 82 | 81 | nahsra__antisamy_CVE-2022-28367_1.6.5 | CVE-2022-28367 | CWE-079 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | nahsra | antisamy | 1.6.5 | https://github.com/nahsra/antisamy | GHSA-3pqg-4rqg-pg9g | b7c151112dd19928e700ee48639942fd1079d1e3 | 0199e7e194dba5e7d7197703f43ebe22401e61ae |
| 83 | 82 | ESAPI__esapi-java-legacy_CVE-2022-24891_2.2.3.1 | CVE-2022-24891 | CWE-079 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | ESAPI | esapi-java-legacy | 2.2.3.1 | https://github.com/ESAPI/esapi-java-legacy | GHSA-q77q-vx4q-xx6q | 2e8694c6beb3bdbb2645b882eba72ce41bc63242 | 096aa60d6441fce4c632b36b36fdf5f53799c29a |
| 84 | 83 | nahsra__antisamy_CVE-2022-29577_1.6.6.1 | CVE-2022-29577 | CWE-079 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | nahsra | antisamy | 1.6.6.1 | https://github.com/nahsra/antisamy | GHSA-vp37-2f9p-3vr3 | b6e76de85a07549f2c97941437dd73430d7287a8 | 32e273507da0e964b58c50fd8a4c94c9d9363af0 |
| 85 | 84 | rhuss__jolokia_CVE-2018-1000129_1.4.0 | CVE-2018-1000129 | CWE-079 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | rhuss | jolokia | 1.4.0 | https://github.com/rhuss/jolokia | GHSA-hfpg-gqjw-779m | 10727cab59a8fc2ae053bec6b2f26f48f1c4245c | 5895d5c137c335e6b473e9dcb9baf748851bbc5f |
| 86 | 85 | keycloak__keycloak_CVE-2014-3656_1.0.5.Final | CVE-2014-3656 | CWE-079 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | keycloak | keycloak | 1.0.5.Final | https://github.com/keycloak/keycloak | GHSA-px42-mr8m-cpgh | 3b071b83aa0444749eba851fdbe0f2ed47932410 | 63b41e2548cbc20bd3758e34a82d880e177bf24c |
| 87 | 86 | asf__cxf_CVE-2016-6812_3.0.11 | CVE-2016-6812 | CWE-079 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | apache | cxf | 3.0.11 | https://github.com/apache/cxf | GHSA-vw2c-5wph-v92r | 6c7df35913ce3fc6ec8f5dc6c6074b187f751aa6 | 1be97cb13aef121b799b1be4d9793c0e8b925a12;1f824d8039c7a42a4aa46f844e6c800e1143c7e7;32e89366e2daa5670ac7a5c5c19f0bf9329a4c1e;a30397b0 |
| 88 | 87 | apache__sling-org-apache-sling-xss_CVE-2016-5394_1.0.8 | CVE-2016-5394 | CWE-079 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | apache | sling-org-apache-sling-xss | 1.0.8 | https://github.com/apache/sling-org-apache-sling-xss | GHSA-xwf4-88xr-hx2j | e23ca68878dd6504066015601b6b76e8fe19b752 | de32b144ad2be3367559f6184d560db42a220529 |
| 89 | 88 | DSpace__DSpace_CVE-2022-31192_5.10 | CVE-2022-31192 | CWE-079 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | DSpace | DSpace | 5.10 | https://github.com/DSpace/DSpace | GHSA-4wm8-c2vv-xrpq | eca7968be7d6b9f8f5f302c9fc09f8186ed4809e | 28eb8158210d41168a62ed5f9e044f754513bc37;f7758457b7ec3489d525e39aa753cc70809d9ad9 |
| 90 | 89 | keycloak__keycloak_CVE-2022-4137_20.0.3 | CVE-2022-4137 | CWE-079 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | keycloak | keycloak | 20.0.3 | https://github.com/keycloak/keycloak | GHSA-9hhc-pj4w-w5rv | 02d113ab71de67817890b655ae792580a4fb8ee2 | 30d0e9d22dae51392e5a3748a1c68c116667359a |
| 91 | 90 | keycloak__keycloak_CVE-2022-1274_20.0.3 | CVE-2022-1274 | CWE-079 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | keycloak | keycloak | 20.0.3 | https://github.com/keycloak/keycloak | GHSA-m4fv-gm5m-4725 | 02d113ab71de67817890b655ae792580a4fb8ee2 | fc3c61235fa30132123c17ed8702ff7b3a672fe9 |
| 92 | 91 | xwiki__xwiki-commons_CVE-2023-29201_14.5 | CVE-2023-29201 | CWE-079 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | xwiki | xwiki-commons | 14.5 | https://github.com/xwiki/xwiki-commons | GHSA-m3jr-cvhj-f35j | 3780c8f6836c7d380f649562e9718a0868112945 | 4a185e0594d90cd4916d60aa60bb4333dc5623b2;b11eae9d82cb53f32962056b5faa73f3720c6182 |
| 93 | 92 | xwiki__xwiki-commons_CVE-2023-29528_14.9-rc-1 | CVE-2023-29528 | CWE-079 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | xwiki | xwiki-commons | 14.9-rc-1 | https://github.com/xwiki/xwiki-commons | GHSA-x37v-36wv-6v6h | 7796f76096a3e94b7a0a96bf12b3b026922e3573 | 8ff1a9d7e5d7b45b690134a537d53dc05cae04ab |
| 94 | 93 | xwiki__xwiki-rendering_CVE-2023-32070_14.5 | CVE-2023-32070 | CWE-079 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | xwiki | xwiki-rendering | 14.5 | https://github.com/xwiki/xwiki-rendering | GHSA-6gf5-c898-7rxp | 0057b2db748674446ceeacf3a540d42b7295a524 | c40e2f5f9482ec6c3e71dbf1fff5ba8a5e44cdc1 |
| 95 | 94 | xwiki__xwiki-commons_CVE-2023-31126_14.10.3 | CVE-2023-31126 | CWE-079 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | xwiki | xwiki-commons | 14.10.3 | https://github.com/xwiki/xwiki-commons | GHSA-pv7v-ph6g-3gxv | 011dee864805aec0b24151f69f230a42e40087da | 0b8e9c45b7e7457043938f35265b2aa5adc76a68 |
| 96 | 95 | apache__jspwiki_CVE-2022-46907_2.11.3 | CVE-2022-46907 | CWE-079 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | apache | jspwiki | 2.11.3 | https://github.com/apache/jspwiki | GHSA-qvq8-cw7f-m7m4 | 515dff39c66c43318056fa76a20117662d2a0e8d | 0b9a0149032170063f22d65e335dfd317db815ea;46e1ef7a595ca5cabf5ef184139910413f2024fc;484c6a133e397693991b7c9a9b62ef3ca48ce707;75019d337f1d0033b1f65428e75f43baeffd99dd;82be08904a6d8bd22fa2d4e5a7e85f43408724d3;9d6dbf911d52d724297e4e46c4b80649fb028ff9;df20770f251a8d7431047e556b144ef24ee6a3a7 |
| 97 | 96 | keycloak__keycloak_CVE-2022-4361_21.1.1 | CVE-2022-4361 | CWE-079 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | keycloak | keycloak | 21.1.1 | https://github.com/keycloak/keycloak | GHSA-3p62-6fjh-3p5h | 0ca0a5fa4459d97c4d769fec15b4ba99c3824314 | a1cfe6e24e5b34792699a00b8b4a8016a5929e3a |
| 98 | 97 | xwiki__xwiki-commons_CVE-2023-36471_14.10.5 | CVE-2023-36471 | CWE-079 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | xwiki | xwiki-commons | 14.10.5 | https://github.com/xwiki/xwiki-commons | GHSA-6pqf-c99p-758v | 8dfb9fcb4f456c70f82ea670ca0e2f3dee373ee4 | 99484d48e899a68a1b6e33d457825b776c6fe8c3 |
| 99 | 98 | jstachio__jstachio_CVE-2023-33962_1.0.0 | CVE-2023-33962 | CWE-079 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | jstachio | jstachio | 1.0.0 | https://github.com/jstachio/jstachio | GHSA-gwxv-jv83-6qjr | 9ce20009d6bf726086fc528fceb174933077bff4 | 7b2f78377d1284df14c580be762a25af5f8dcd66 |
| 100 | 99 | xwiki__xwiki-rendering_CVE-2023-37908_14.10.3 | CVE-2023-37908 | CWE-079 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | xwiki | xwiki-rendering | 14.10.3 | https://github.com/xwiki/xwiki-rendering | GHSA-663w-2xp3-5739 | 0b0286c4caeab4cc1fdd617ec5bf0a91e6f46762 | f4d5acac451dccaf276e69f0b49b72221eef5d2f |
| 101 | 100 | SpringSource__spring-security-oauth_CVE-2018-1260_2.3.2.RELEASE | CVE-2018-1260 | CWE-094 | Improper Control of Generation of Code ('Code Injection') | spring-attic | spring-security-oauth | 2.3.2.RELEASE | https://github.com/spring-attic/spring-security-oauth | GHSA-rrpm-pj7p-7j9q | 97e39dde7e88aae802be98de084a382886ca4255 | 70e5ba84ca98b7ab42c1900bdd9fa51b393d611f |
| 102 | 101 | apache__activemq_CVE-2019-0222_5.15.8 | CVE-2019-0222 | CWE-094 | Improper Control of Generation of Code ('Code Injection') | apache | activemq | 5.15.8 | https://github.com/apache/activemq | GHSA-jpv3-g4cc-6vfx | bcad7e1f6a6dd078d87787a03b56560e995ef773 | 98b9f2e;f78c0962ffb46fae3397eed6b7ec1e6e15045031 |
| 103 | 102 | jmrozanec__cron-utils_CVE-2021-41269_9.1.5 | CVE-2021-41269 | CWE-094 | Improper Control of Generation of Code ('Code Injection') | jmrozanec | cron-utils | 9.1.5 | https://github.com/jmrozanec/cron-utils | GHSA-p9m8-27x8-rg87 | 34493c66edb490396202edad66c5f8cc5717d494 | cfd2880f80e62ea74b92fa83474c2aabdb9899da;d6707503ec2f20947f79e38f861dba93b39df9da |
| 104 | 103 | apache__struts_CVE-2020-17530_2.5.25 | CVE-2020-17530 | CWE-094 | Improper Control of Generation of Code ('Code Injection') | apache | struts | 2.5.25 | https://github.com/apache/struts | GHSA-jc35-q369-45pv | b3a9d82d5830ef9cd7811cfa3f86a373ae52fada | 45667346629455f7ea125bff36bf9b763b7e8463 |
| 105 | 104 | apache__activemq_CVE-2020-11998_5.15.12 | CVE-2020-11998 | CWE-094 | Improper Control of Generation of Code ('Code Injection') | apache | activemq | 5.15.12 | https://github.com/apache/activemq | GHSA-wqfh-9m4g-7x6x | cebbd7fdea0633e6a0cbbef427f9b753949fa531 | 0d6e5f2;88b78d0;aa8900c |
| 106 | 105 | spring-projects__spring-framework_CVE-2022-22965_5.2.19.RELEASE | CVE-2022-22965 | CWE-094 | Improper Control of Generation of Code ('Code Injection') | spring-projects | spring-framework | 5.2.19.RELEASE | https://github.com/spring-projects/spring-framework | GHSA-36p3-wjmg-h94x | 925b07826067d57a8a057837a1b5973cb6fad186 | 002546b3e4b8d791ea6acccb81eb3168f51abb15 |
| 107 | 106 | spring-cloud__spring-cloud-gateway_CVE-2022-22947_3.0.6 | CVE-2022-22947 | CWE-094 | Improper Control of Generation of Code ('Code Injection') | spring-cloud | spring-cloud-gateway | 3.0.6 | https://github.com/spring-cloud/spring-cloud-gateway | GHSA-3gx9-37ww-9qw6 | da0f9014bcc9131d8f15141be74011b89a01420f | 1b868d2159e8fb71c22d583e424ae699f90532e3 |
| 108 | 107 | apache__dubbo_CVE-2021-30180_2.7.9 | CVE-2021-30180 | CWE-094 | Improper Control of Generation of Code ('Code Injection') | apache | dubbo | 2.7.9 | https://github.com/apache/dubbo | GHSA-7wfc-x4f7-gg2x | f0483b80a32e813a4393879744e30d0084c3eafd | 041f8bb0a98a912bd363560d5a2339198dcf79a5 |
| 109 | 108 | apache__incubator-dubbo_CVE-2021-30181_2.6.8 | CVE-2021-30181 | CWE-094 | Improper Control of Generation of Code ('Code Injection') | apache | dubbo | 2.6.8 | https://github.com/apache/dubbo | GHSA-qmfc-6www-fjqw | 5a6a069986f3627f2d50720c50024df31a3dc38a | 9b7575aa1c949959c86d29c47625575b58a9dfa9 |
| 110 | 109 | spring-projects__spring-security_CVE-2011-2732_2.0.6.RELEASE | CVE-2011-2732 | CWE-094 | Improper Control of Generation of Code ('Code Injection') | spring-projects | spring-security | 2.0.6.RELEASE | https://github.com/spring-projects/spring-security | GHSA-5xm9-rf63-wj7h | beb0ec4ba95265a7e3481b3eb8d87f3b922733ae | a087e828a63edf0932e4eecf174cf816cbe6a58a;5238ba0e2615ef733a906b264c6c06a4446a886b |
| 111 | 110 | fabric8io__kubernetes-client_CVE-2021-4178_5.0.2 | CVE-2021-4178 | CWE-094 | Improper Control of Generation of Code ('Code Injection') | fabric8io | kubernetes-client | 5.0.2 | https://github.com/fabric8io/kubernetes-client | GHSA-98g7-rxmf-rrxm | 1d1b3d404836871c4d0fc0a35dafe5d40369b519 | 445103004d1ed3153d5abb272473451d05891e39 |
| 112 | 111 | asf__commons-text_CVE-2022-42889_1.9 | CVE-2022-42889 | CWE-094 | Improper Control of Generation of Code ('Code Injection') | apache | commons-text | 1.9 | https://github.com/apache/commons-text | GHSA-599f-7c49-w659 | cb85bed468e99d34b88d0c81fe20eb3b1615660e | b9b40b903e2d1f9935039803c9852439576780ea |
| 113 | 112 | ff4j__ff4j_CVE-2022-44262_1.8.13 | CVE-2022-44262 | CWE-094 | Improper Control of Generation of Code ('Code Injection') | ff4j | ff4j | 1.8.13 | https://github.com/ff4j/ff4j | GHSA-65hj-9ppw-77xc | 7c34409d320ed1c917c4ec4ac72a99661c4e446f | 62d03140f3bfbd380d0f4b4e5a94dcb8baa9d9c6 |
| 114 | 113 | codecentric__spring-boot-admin_CVE-2022-46166_2.6.9 | CVE-2022-46166 | CWE-094 | Improper Control of Generation of Code ('Code Injection') | codecentric | spring-boot-admin | 2.6.9 | https://github.com/codecentric/spring-boot-admin | GHSA-w3x5-427h-wfq6 | 650db9e89d80f54b41ebd18f8c27389e8741516d | c14c3ec12533f71f84de9ce3ce5ceb7991975f75 |
| 115 | 114 | xerial__sqlite-jdbc_CVE-2023-32697_3.41.2.1 | CVE-2023-32697 | CWE-094 | Improper Control of Generation of Code ('Code Injection') | xerial | sqlite-jdbc | 3.41.2.1 | https://github.com/xerial/sqlite-jdbc | GHSA-6phf-6h5g-97j2 | a3322b2ae802b28624bcd4e2e20c55558e46cf99 | edb4b8adc2447bc04e05b9b908195a4bc7926242 |
| 116 | 115 | asf__nifi_CVE-2023-34468_1.21.0 | CVE-2023-34468 | CWE-094 | Improper Control of Generation of Code ('Code Injection') | apache | nifi | 1.21.0 | https://github.com/apache/nifi | GHSA-xm2m-2q6h-22jw | 892f822107da84ca0dcfefdb5c91c5bc11dc3dc1 | 4faf3ea59895e7e153db3f8f61147ff70a254361 |
| 117 | 116 | apache__rocketmq_CVE-2023-37582_4.9.6 | CVE-2023-37582 | CWE-094 | Improper Control of Generation of Code ('Code Injection') | apache | rocketmq | 4.9.6 | https://github.com/apache/rocketmq | GHSA-gpq8-963w-8qc9 | db4ba459bec9392ac37647ff1a4d24d30466814d | fb1c67d536c95ec7bd5904e61b9d97c4c2ee5a3d |
| 118 | 117 | asf__nifi_CVE-2023-36542_1.22.0 | CVE-2023-36542 | CWE-094 | Improper Control of Generation of Code ('Code Injection') | apache | nifi | 1.22.0 | https://github.com/apache/nifi | GHSA-r969-8v3h-23v9 | 71e3ea9f2c58d0cf2ce6824c388f2bd3e917dfc8 | 532578799c |
| 119 | 118 | apache__rocketmq_CVE-2023-33246_5.1.0 | CVE-2023-33246 | CWE-094 | Improper Control of Generation of Code ('Code Injection') | apache | rocketmq | 5.1.0 | https://github.com/apache/rocketmq | GHSA-x3cq-8f32-5f63 | b8e9334d2a1ed8868a3b15b63b8ef3198fcb81ce | 9d411cf04a695e7a3f41036e8377b0aa544d754d;c3ada731405c5990c36bf58d50b3e61965300703 |
| 120 | 119 | apache__dolphinscheduler_CVE-2023-51770_3.2.0 | CVE-2023-51770 | CWE-094 | Improper Control of Generation of Code ('Code Injection') | apache | dolphinscheduler | 3.2.0 | https://github.com/apache/dolphinscheduler | GHSA-ff2w-wm48-jhqj | f64b254809f21f811eaef780d489a43b490ca327 | 309c8c97a9b9003244496dedc7861a5026f9441a |
| 121 | 120 | apache__dolphinscheduler_CVE-2023-49109_3.2.0 | CVE-2023-49109 | CWE-094 | Improper Control of Generation of Code ('Code Injection') | apache | dolphinscheduler | 3.2.0 | https://github.com/apache/dolphinscheduler | GHSA-qwxx-xww6-8q8m | f64b254809f21f811eaef780d489a43b490ca327 | 8c01fcf14b199e2c1ba86c17351e1ea30614f484 |