VulertSecurity VulertSecurity

Vulnerability Database · Search

Bitnami vulnerabilities — 9,931 matching vulnerabilities

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed — no installation and no source-code access required.

Scan your app free →
Severity Vulnerability Package Ecosystem Disclosed Fixed version
8.1 critical CVE-2021-24112: System.Drawing.Common Remote Code Execution Vulnerability System.Drawing.Common bitnami 25 Feb 2021 4.7.2, 5.0.3
7.5 high CVE-2022-30634: Vulnerability in stdlib package (Infinite loop in Read) stdlib bitnami 15 Jul 2022 1.17.11, 1.18.3
7.5 high CVE-2022-29804: Vulnerability in stdlib package (Directory Traversal Attack) stdlib bitnami 10 Aug 2022 1.17.11, 1.18.3
7.8 high CVE-2022-30580: Code injection in os/exec package in Go stdlib bitnami 10 Aug 2022 1.17.11, 1.18.3
High CVE-2022-24294: Apache MXNet Regular Expression Denial-of-Service Vulnerability mxnet Bitnami 06 Nov 2023 1.9.1
High CVE-2022-41743: Vulnerability in nginx-ingress-controller nginx-ingress-controller Bitnami 06 Nov 2023 1.12.4
High CVE-2022-41742: Vulnerability in nginx-ingress-controller nginx-ingress-controller Bitnami 06 Nov 2023 1.12.4
High CVE-2022-41741: Vulnerability in nginx-ingress-controller nginx-ingress-controller Bitnami 06 Nov 2023 1.12.4
Medium CVE-2022-30535: NGINX Ingress Controller Secrets Exposure nginx-ingress-controller Bitnami 06 Nov 2023 2.3.0
Medium CVE-2021-23055: nginx-ingress-controller Command Line Restriction Bypass nginx-ingress-controller Bitnami 06 Nov 2023 1.12.3
High CVE-2022-38577: Insecure Permissions in ProcessMaker User Profile Page processmaker Bitnami 06 Nov 2023 3.5.4
High CVE-2020-13526: SQL Injection Vulnerability in ProcessMaker 3.4.11 processmaker Bitnami 06 Nov 2023 No fix published
High CVE-2020-13525: SQL Injection in ProcessMaker 3.4.11 processmaker Bitnami 06 Nov 2023 No fix published
High CVE-2023-36038: ASP.NET Core Denial of Service Vulnerability in Bitnami dotnet dotnet Bitnami 21 Nov 2023 8.0.0
High CVE-2023-36038: ASP.NET Core Denial of Service Vulnerability in dotnet-sdk dotnet-sdk Bitnami 21 Nov 2023 8.0.0
Medium CVE-2021-36539: Canvas LMS Unpublished Files Access Control Vulnerability canvaslms Bitnami 31 Jan 2024 2022-10-15.0.0
Medium CVE-2020-5775: Server-Side Request Forgery in Canvas LMS canvaslms Bitnami 31 Jan 2024 No fix published
Medium CVE-2023-25440: Stored Cross Site Scripting (XSS) in CiviCRM 5.59.alpha1 civicrm Bitnami 31 Jan 2024 No fix published
Critical CVE-2022-40835: CodeIgniter SQL Injection Vulnerability codeigniter Bitnami 31 Jan 2024 3.1.13
Critical CVE-2022-40834: CodeIgniter SQL Injection Vulnerability codeigniter Bitnami 31 Jan 2024 3.1.13

Showing the first 200 matches. Add filters to narrow the results.

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

Searching the database

How do I search for a CVE or a package?

Type a CVE id, package name, ecosystem or keyword into the search field. Results include the severity, the affected package, the ecosystem, the disclosure date and the fixed version.

Can I filter by severity or by whether a fix exists?

Yes. The filters on the left narrow the list to critical, high, medium or low vulnerabilities, to a single ecosystem, and to vulnerabilities that have a fix available or none yet.

What does "No fix published" mean?

No patched version has been released for that vulnerability yet. The vulnerability page still shows the affected range and any workaround that can reduce exposure in the meantime.