All disclosed vulnerabilities by Snyk

• • H
  Command Injection in geokit-rails (rubygems)

  Discovered by Calum Hutton
  5 Oct 2023
• • H
  Directory Traversal in static-server (npm)

  Discovered by Liran Tal - Snyk Research Team
  2 Oct 2023
• • H
  Loop with Unreachable Exit Condition ('Infinite Loop') in asyncua (pip)

  Discovered by Tran Van Arthur
  2 Oct 2023
• • M
  Improper Authentication in asyncua (pip)

  Discovered by Tran Van Arthur
  2 Oct 2023
• • M
  Cross-site Scripting (XSS) in quill-mention (npm)

  Discovered by Cameron Foale
  27 Sept 2023
• • H
  Command Injection in pydash (pip)

  Discovered by Calum Hutton
  26 Sept 2023
• • M
  Denial of Service (DoS) in graphql (npm)

  Discovered by Tadhg Lewis
  19 Sept 2023
• • M
  Arbitrary Argument Injection in blamer (npm)

  Discovered by Liran Tal
  18 Sept 2023
• • M
  Uncontrolled Resource Consumption in sidekiq (rubygems)

  Discovered by Keegan Parr
  12 Sept 2023
• • M
  Cross-site Scripting (XSS) in @excalidraw/excalidraw (npm)

  Discovered by Eugene Lim, The MOps Team
  15 Aug 2023