Grav Git Sync 1.0.2 through 3.4.12 Command Injection via Commit Author
cve-program ·
Vendor product: grav-plugin-git-sync
No access to your tenant or devices. Every item links to its source. What this means
Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.
Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.
cve-program ·
Vendor product: grav-plugin-git-sync
cve-program ·
Vendor product: mcp-context-forge
cve-program ·
Vendor product: grav-plugin-login
cve-program ·
Vendor product: cms · Vendor product: cms
cve-program ·
Vendor product: servor
cve-program ·
Vendor product: deepsec
cve-program ·
Vendor product: modern-tar
cve-program ·
Vendor product: continue
cve-program ·
Vendor product: rapyd-admin
cve-program ·
Vendor product: ImageMagick · Vendor product: ImageMagick
cve-program ·
Vendor product: ImageMagick · Vendor product: ImageMagick
cve-program ·
Vendor product: ImageMagick · Vendor product: ImageMagick
cve-program ·
Vendor product: ImageMagick · Vendor product: ImageMagick
cve-program ·
Vendor product: ImageMagick
cve-program ·
Vendor product: FreeRDP
cve-program ·
Vendor product: serena
cve-program ·
Vendor product: Online-Appointment-Booking-System
cve-program ·
Vendor product: FreeRDP
cve-program ·
Vendor product: dragonfly
cve-program ·
Vendor product: crawl4ai
cve-program ·
https://access.redhat.com/downloads/content/package-browser/: quay/quay-rhel8 · https://access.redhat.com/downloads/content/package-browser/: quay/quay-rhel9
cve-program ·
Vendor product: sftpgo
cve-program ·
Vendor product: monkeytype
cve-program ·
Vendor product: Online-Appointment-Booking-System
cve-program ·
Vendor product: Thelia
cve-program ·
Vendor product: zoraxy
cve-program ·
Vendor product: E1700
cve-program ·
https://pypi.org/project/sglang: sglang
osv · CVE-2023-42456 · GHSA-2r3c-m6v7-9354
crates.io: sudo-rs
osv · CVE-2024-39697 · GHSA-mjw4-jj88-v687
crates.io: phonenumber
cve-program ·
Vendor product: LogicalDOC Community Edition
cve-program ·
Vendor product: tinacms · Vendor product: web-components
cve-program ·
Vendor product: LogicalDOC Community Edition
osv · CVE-2023-42444 · GHSA-whhr-7f2w-qqj2
crates.io: phonenumber
osv · CVE-2023-42447 · GHSA-cxvp-82cq-57h2
crates.io: blurhash
cve-program ·
Vendor product: jshERP
cve-program ·
Vendor product: obsidian-tc
cve-program ·
Vendor product: pi-agent-dashboard
cve-program ·
Vendor product: wizarr
cve-program ·
Vendor product: jshERP
cve-program ·
Vendor product: jshERP
cve-program ·
Vendor product: yshop-crm
cve-program ·
Vendor product: moonlight-qt
cve-program ·
Vendor product: lamp-cloud
A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.