Skip to content

Security Report: Project Vulnerabilities #2121

Description

@github-actions

Last scan date

5/18/2025

Present Vulnerabilities

Vulnerability IDPkgNameTitleSeverityStatusFixed VersionPublished DateAffectsLinks
CVE-2025-24033@fastify/multipartUnlimited consumption of resources in @fastify/multipartHIGHfixed8.3.1, 9.0.32025-01-23T18:15:33.61Z
  • api
CVE-2024-21534jsonpath-plusjsonpath-plus: Remote Code Execution in jsonpath-plus via Improper Input SanitizationCRITICALfixed10.2.02024-10-11T13:15:15.667Z
  • blockchain
    CVE-2025-1302jsonpath-plusjsonpath-plus: Remote Code Execution in jsonpath-plus via Improper Input SanitizationHIGHfixed10.3.02025-02-15T05:15:11.683Z
    • blockchain
      CVE-2024-53382prismjsPrism (aka PrismJS) through 1.29.0 allows DOM Clobbering (with resulta ...MEDIUMaffected-2025-03-03T07:15:33.397Z
      • frontend
        CVE-2025-27152axiosaxios is a promise based HTTP client for the browser and node.js. The ...HIGHfixed1.8.22025-03-07T16:15:38.773Z
        • frontend
        • api
        • blockchain
        • provisioning
        • e2e-test
        • excel-export-service
        • email-notification-service
        • storage-service
        • migration
        CVE-2025-27789@babel/helpersBabel is a compiler for writing next generation JavaScript. When using ...MEDIUMfixed7.26.10, 8.0.0-alpha.17-
        • frontend
        • frontend
        CVE-2025-30144fast-jwtFast-JWT Improperly Validates iss ClaimsMEDIUMfixed5.0.62025-03-19T16:15:33.08Z
        • api
        CVE-2024-12905tar-fstar-fs: link following and path traversal via maliciously crafted tar fileHIGHfixed1.16.4, 2.1.2, 3.0.82025-03-27T17:15:53.25Z
        • blockchain
        • e2e-test
        • migration

          Metadata

          Metadata

          Assignees

          No one assigned

            Labels

            apiIndicates api related issue or featureblockchainIndicates blockchain related issue or featurefrontendIndicates frontend related issue or featuresecuritystorage-serviceIndicates storage-service related issue or feature

            Type

            No type

            Projects

            Milestone

            No milestone

            Relationships

            None yet

            Development

            No branches or pull requests

            Issue actions