Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
s the hash" to login or reuse a theoretically expired "remember me" cookie. It also exposes the hash over the network and stores it unnecessarily in the browser. The cookie itself is set to expire after 7 days but its value will remain valid as long as the admin password doesn't change. If a cookie is leaked or compromised it could be used forever as long as the admin password is not changed. An attacker that obtained the password hash via an other attack vector (for example a path traversal vulnerability) could use it to login as the admin by setting the hash as the cookie value without the need to crack it to obtain the admin password (pass the hash). The hash is exposed over the network a
value without the need to crack it to obtain the admin password (pass the hash). The hash is exposed over the network and in the browser where the cookie is transmitted and stored. This issue is patched in version 5.18.3. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/pi-hole/AdminLTE/security/advisories/GHSA-33w4-xf7m-f82m
CVE ID: CVE-2023-23615 State: PUBLISHED Published: 2023-02-03T21:57:29.878Z Last Updated: 2025-03-10T21:16:16.563Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: discourse Products: discourse Problem Types: CWE-284 Description: Discourse is an open source discussion platform. The embeddable comments can be exploited to create new topics as any user but without any clear title or content. This issue is patched in the latest stable, beta and tests-passed versions of Discourse. As a workaround, disable embeddable comments by deleting all embeddable hosts. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.c
ddable hosts. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/discourse/discourse/security/advisories/GHSA-7mf3-5v84-wxq8
CVE ID: CVE-2023-23616 State: PUBLISHED Published: 2023-01-27T00:00:00.000Z Last Updated: 2025-03-10T21:19:07.953Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L) Vendors: discourse Products: discourse Problem Types: CWE-400 Description: Discourse is an open-source discussion platform. Prior to version 3.0.1 on the `stable` branch and 3.1.0.beta2 on the `beta` and `tests-passed` branches, when submitting a membership request, there is no character limit for the reason provided with the request. This could potentially allow a user to flood the database with a large amount of data. However it is unlikely this could be used as part of a DoS attack, as the paths reading bac
with a large amount of data. However it is unlikely this could be used as part of a DoS attack, as the paths reading back the reasons are only available to administrators. Starting in version 3.0.1 on the `stable` branch and 3.1.0.beta2 on the `beta` and `tests-passed` branches, a limit of 280 characters has been introduced for membership requests. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/discourse/discourse/pull/19993 - https://github.com/discourse/discourse/commit/d5745d34c20c31a221039d8913f33064433003ea - https://github.com/discourse/discourse/security/advisories/GHSA-6xff-p329-9pgf - https://github.com/discourse/discours
- https://github.com/discourse/discourse/security/advisories/GHSA-6xff-p329-9pgf - https://github.com/discourse/discourse/commit/3e0cc4a5d9ef44ad902f6985d046ebb32f0a14ee
CVE ID: CVE-2023-23617 State: PUBLISHED Published: 2023-01-27T23:24:33.249Z Last Updated: 2025-03-10T21:18:07.687Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H) Vendors: OpenMage Products: magento-lts Problem Types: CWE-835 Description: OpenMage LTS is an e-commerce platform. Versions prior to 19.4.22 and 20.0.19 contain an infinite loop in malicious code filter in certain conditions. Versions 19.4.22 and 20.0.19 have a fix for this issue. There are no known workarounds. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/OpenMage/magento-lts/security/advisories/GHSA-3p73-mm7v-4f6m - https://github.com/OpenMa
eferences: - https://github.com/OpenMage/magento-lts/security/advisories/GHSA-3p73-mm7v-4f6m - https://github.com/OpenMage/magento-lts/commit/494027785bdb7db53e60c11ef03c144b61cd3172 - https://github.com/OpenMage/magento-lts/releases/tag/v19.4.22 - https://github.com/OpenMage/magento-lts/releases/tag/v20.0.19
CVE ID: CVE-2023-23618 State: PUBLISHED Published: 2023-02-14T20:38:04.921Z Last Updated: 2025-03-10T21:11:24.730Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: git-for-windows Products: git Problem Types: CWE-426 Description: Git for Windows is the Windows port of the revision control system Git. Prior to Git for Windows version 2.39.2, when `gitk` is run on Windows, it potentially runs executables from the current directory inadvertently, which can be exploited with some social engineering to trick users into running untrusted code. A patch is available in version 2.39.2. As a workaround, avoid using `gitk` (or Git GUI's "Visualize History" functionality)
ch is available in version 2.39.2. As a workaround, avoid using `gitk` (or Git GUI's "Visualize History" functionality) in clones of untrusted repositories. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/git-for-windows/git/security/advisories/GHSA-wxwv-49qw-35pm - https://github.com/git-for-windows/git/commit/49a8ec9dac3cec6602f05fed1b3f80a549c8c05c - https://github.com/git-for-windows/git/releases/tag/v2.39.2.windows.1 - https://wiki.tcl-lang.org/page/exec
CVE ID: CVE-2023-23619 State: PUBLISHED Published: 2023-01-26T10:42:51.404Z Last Updated: 2025-03-10T21:19:14.012Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: asyncapi Products: modelina Problem Types: CWE-94 Description: Modelina is a library for generating data models based on inputs such as AsyncAPI, OpenAPI, or JSON Schema documents. Versions prior to 1.0.0 are vulnerable to Code injection. This issue affects anyone who is using the default presets and/or does not handle the functionality themself. This issue has been partially mitigated in version 1.0.0, with the maintainer's GitHub Security Advisory (GHSA) noting "It is impossible to fully guard a
igated in version 1.0.0, with the maintainer's GitHub Security Advisory (GHSA) noting "It is impossible to fully guard against this, because users have access to the original raw information. However, as of version 1, if you only access the constrained models, you will not encounter this issue. Further similar situations are NOT seen as a security issue, but intended behavior." The suggested workaround from the maintainers is "Fully custom presets that change the entire rendering process which can then escape the user input." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/asyncapi/modelina/security/advisories/GHSA-4jg2-84c2-pj95
CVE ID: CVE-2023-23620 State: PUBLISHED Published: 2023-01-27T00:00:00.000Z Last Updated: 2025-03-10T21:19:00.947Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: discourse Products: discourse Problem Types: CWE-200 Description: Discourse is an open-source discussion platform. Prior to version 3.0.1 on the `stable` branch and 3.1.0.beta2 on the `beta` and `tests-passed` branches, the contents of latest/top routes for restricted tags can be accessed by unauthorized users. This issue is patched in version 3.0.1 on the `stable` branch and 3.1.0.beta2 on the `beta` and `tests-passed` branches. There are no known workarounds. Additional Analyst Notes: - CVE Progr
0.beta2 on the `beta` and `tests-passed` branches. There are no known workarounds. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/discourse/discourse/security/advisories/GHSA-hvj9-g84x-5prx - https://github.com/discourse/discourse/commit/105fee978d73b0ec23ff814a09d1c0c9ace95164 - https://github.com/discourse/discourse/pull/20004
CVE ID: CVE-2023-23621 State: PUBLISHED Published: 2023-01-27T23:31:05.923Z Last Updated: 2025-03-10T21:18:01.772Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H) Vendors: discourse Products: discourse Problem Types: CWE-1333 Description: Discourse is an open-source discussion platform. Prior to version 3.0.1 on the `stable` branch and version 3.1.0.beta2 on the `beta` and `tests-passed` branches, a malicious user can cause a regular expression denial of service using a carefully crafted user agent. This issue is patched in version 3.0.1 on the `stable` branch and version 3.1.0.beta2 on the `beta` and `tests-passed` branches. There are no known workarounds. Additional
e` branch and version 3.1.0.beta2 on the `beta` and `tests-passed` branches. There are no known workarounds. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/discourse/discourse/security/advisories/GHSA-mrfp-54hf-jrcv - https://github.com/discourse/discourse/pull/20002 - https://github.com/discourse/discourse/commit/6d92c3cbdac431db99a450f360a3048bb3aaf458
CVE ID: CVE-2023-23622 State: PUBLISHED Published: 2023-03-17T14:17:17.427Z Last Updated: 2025-02-25T14:54:38.172Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: discourse Products: discourse Problem Types: CWE-200 Description: Discourse is an open-source discussion platform. Prior to version 3.0.1 of the `stable` branch and version 3.1.0.beta2 of the `beta` and `tests-passed` branches, the count of topics displayed for a tag is a count of all regular topics regardless of whether the topic is in a read restricted category or not. As a result, any users can technically poll a sensitive tag to determine if a new topic is created in a category which the user d
lt, any users can technically poll a sensitive tag to determine if a new topic is created in a category which the user does not have excess to. In version 3.0.1 of the `stable` branch and version 3.1.0.beta2 of the `beta` and `tests-passed` branches, the count of topics displayed for a tag defaults to only counting regular topics which are not in read restricted categories. Staff users will continue to see a count of all topics regardless of the topic's category read restrictions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/discourse/discourse/security/advisories/GHSA-2wvr-4x7w-v795 - https://github.com/discourse/discourse/pull
s://github.com/discourse/discourse/security/advisories/GHSA-2wvr-4x7w-v795 - https://github.com/discourse/discourse/pull/20004 - https://github.com/discourse/discourse/pull/20005 - https://github.com/discourse/discourse/commit/105fee978d73b0ec23ff814a09d1c0c9ace95164 - https://github.com/discourse/discourse/commit/ecb9aa5dba94741d9579f4f873f0675f48b4184f
CVE ID: CVE-2023-23623 State: PUBLISHED Published: 2023-09-06T20:16:10.381Z Last Updated: 2024-09-26T17:48:22.057Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: electron Products: electron Problem Types: CWE-670 Description: Electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. A Content-Security-Policy that disables eval, specifically setting a `script-src` directive and _not_ providing `unsafe-eval` in that directive, is not respected in renderers that have sandbox disabled. i.e. `sandbox: false` in the `webPreferences` object. This allows usage of methods like `eval()` and `new Function` unexpecte
`sandbox: false` in the `webPreferences` object. This allows usage of methods like `eval()` and `new Function` unexpectedly which can result in an expanded attack surface. This issue only ever affected the 22 and 23 major versions of Electron and has been fixed in the latest versions of those release lines. Specifically, these versions contain the fixes: 22.0.1 and 23.0.0-alpha.2 We recommend all apps upgrade to the latest stable version of Electron. If upgrading isn't possible, this issue can be addressed without upgrading by enabling `sandbox: true` on all renderers. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/electron/electr
tional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/electron/electron/security/advisories/GHSA-gxh7-wv9q-fwfr
CVE ID: CVE-2023-23624 State: PUBLISHED Published: 2023-01-27T23:35:10.242Z Last Updated: 2025-03-10T21:17:55.270Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: discourse Products: discourse Problem Types: CWE-200 Description: Discourse is an open-source discussion platform. Prior to version 3.0.1 on the `stable` branch and version 3.1.0.beta2 on the `beta` and `tests-passed` branches, someone can use the `exclude_tag param` to filter out topics and deduce which ones were using a specific hidden tag. This affects any Discourse site using hidden tags in public categories. This issue is patched in version 3.0.1 on the `stable` branch and version 3.1.0.beta2
hidden tags in public categories. This issue is patched in version 3.0.1 on the `stable` branch and version 3.1.0.beta2 on the `beta` and `tests-passed` branches. As a workaround, secure any categories that are using hidden tags, change any existing hidden tags to not include private data, or remove any hidden tags currently in use. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/discourse/discourse/security/advisories/GHSA-qgj5-g5vf-fm7q - https://github.com/discourse/discourse/pull/20006 - https://github.com/discourse/discourse/commit/f55e0fe7910149c431861c18ce407d1be0d6091a
CVE ID: CVE-2023-23625 State: PUBLISHED Published: 2023-02-09T20:57:22.072Z Last Updated: 2025-03-10T21:13:58.723Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: ipfs Products: go-unixfs Problem Types: CWE-400 Description: go-unixfs is an implementation of a unix-like filesystem on top of an ipld merkledag. Trying to read malformed HAMT sharded directories can cause panics and virtual memory leaks. If you are reading untrusted user input, an attacker can then trigger a panic. This is caused by bogus `fanout` parameter in the HAMT directory nodes. Users are advised to upgrade to version 0.4.3 to resolve this issue. Users unable to upgrade should not feed unt
nodes. Users are advised to upgrade to version 0.4.3 to resolve this issue. Users unable to upgrade should not feed untrusted user data to the decoding functions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ipfs/go-unixfs/security/advisories/GHSA-q264-w97q-q778 - https://github.com/ipfs/go-unixfs/commit/467d139a640ecee4f2e74643dafcc58bb3b54175
CVE ID: CVE-2023-23626 State: PUBLISHED Published: 2023-02-09T20:54:07.075Z Last Updated: 2025-03-10T21:14:05.485Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: ipfs Products: go-bitfield Problem Types: CWE-754 Description: go-bitfield is a simple bitfield package for the go language aiming to be more performant that the standard library. When feeding untrusted user input into the size parameter of `NewBitfield` and `FromBytes` functions, an attacker can trigger `panic`s. This happen when the `size` is a not a multiple of `8` or is negative. There were already a note in the `NewBitfield` documentation, however known users of this package are subject to thi
ve. There were already a note in the `NewBitfield` documentation, however known users of this package are subject to this issue. Users are advised to upgrade. Users unable to upgrade should ensure that `size` is a multiple of 8 before calling `NewBitfield` or `FromBytes`. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ipfs/go-bitfield/security/advisories/GHSA-2h6c-j3gf-xp9r - https://github.com/ipfs/go-bitfield/commit/5e1d256fe043fc4163343ccca83862c69c52e579
CVE ID: CVE-2023-23627 State: PUBLISHED Published: 2023-01-27T23:44:17.617Z Last Updated: 2025-03-10T21:17:49.562Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: rgrove Products: sanitize Problem Types: CWE-79 Description: Sanitize is an allowlist-based HTML and CSS sanitizer. Versions 5.0.0 and later, prior to 6.0.1, are vulnerable to Cross-site Scripting. When Sanitize is configured with a custom allowlist that allows `noscript` elements, attackers are able to include arbitrary HTML, resulting in XSS (cross-site scripting) or other undesired behavior when that HTML is rendered in a browser. The default configurations do not allow `noscript` elements and a
ired behavior when that HTML is rendered in a browser. The default configurations do not allow `noscript` elements and are not vulnerable. This issue only affects users who are using a custom config that adds `noscript` to the element allowlist. This issue has been patched in version 6.0.1. Users who are unable to upgrade can prevent this issue by using one of Sanitize's default configs or by ensuring that their custom config does not include `noscript` in the element allowlist. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/rgrove/sanitize/security/advisories/GHSA-fw3g-2h3j-qmm7
CVE ID: CVE-2023-23628 State: PUBLISHED Published: 2023-01-28T01:11:16.710Z Last Updated: 2025-03-10T21:17:43.694Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N) Vendors: metabase Products: metabase Problem Types: CWE-200 Description: Metabase is an open source data analytics platform. Affected versions are subject to Exposure of Sensitive Information to an Unauthorized Actor. Sandboxed users shouldn't be able to view data about other Metabase users anywhere in the Metabase application. However, when a sandbox user views the settings for a dashboard subscription, and another user has added users to that subscription, the sandboxed user is able to view the list of re
d subscription, and another user has added users to that subscription, the sandboxed user is able to view the list of recipients for that subscription. This issue is patched in versions 0.43.7.1, 1.43.7.1, 0.44.6.1, 1.44.6.1, 0.45.2.1, and 1.45.2.1. There are no workarounds. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/metabase/metabase/security/advisories/GHSA-492f-qxr3-9rrv
CVE ID: CVE-2023-23629 State: PUBLISHED Published: 2023-01-28T01:23:33.300Z Last Updated: 2025-03-10T21:17:37.583Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:L) Vendors: metabase Products: metabase Problem Types: CWE-200, CWE-269 Description: Metabase is an open source data analytics platform. Affected versions are subject to Improper Privilege Management. As intended, recipients of dashboards subscriptions can view the data as seen by the creator of that subscription. This allows someone with greater access to data to create a dashboard subscription, add people with fewer data privileges, and all recipients of that subscription receive the same data: the charts sh
ion, add people with fewer data privileges, and all recipients of that subscription receive the same data: the charts shown in the email would abide by the privileges of the user who created the subscription. The issue is users with fewer privileges who can view a dashboard are able to add themselves to a dashboard subscription created by someone with additional data privileges, and thus get access to more data via email. This issue is patched in versions 0.43.7.1, 1.43.7.1, 0.44.6.1, 1.44.6.1, 0.45.2.1, and 1.45.2.1. On Metabase instances running Enterprise Edition, admins can disable the "Subscriptions and Alerts" permission for groups that have restricted data permissions, as a workaround
can disable the "Subscriptions and Alerts" permission for groups that have restricted data permissions, as a workaround. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/metabase/metabase/security/advisories/GHSA-ch8f-hhq9-7gv5
CVE ID: CVE-2023-23630 State: PUBLISHED Published: 2023-02-01T00:38:29.697Z Last Updated: 2025-03-10T21:17:25.860Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H) Vendors: eta-dev Products: eta Problem Types: CWE-79 Description: Eta is an embedded JS templating engine that works inside Node, Deno, and the browser. XSS attack - anyone using the Express API is impacted. The problem has been resolved. Users should upgrade to version 2.0.0. As a workaround, don't pass user supplied things directly to `res.render`. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/eta-dev/eta/security/advisories/GHSA-xrh7-m5pp-39r6
ontainer: - CISA ADP Vulnrichment: References: - https://github.com/eta-dev/eta/security/advisories/GHSA-xrh7-m5pp-39r6 - https://github.com/eta-dev/eta/commit/5651392462ee0ff19d77c8481081a99e5b9138dd - https://github.com/eta-dev/eta/releases/tag/v2.0.0
CVE ID: CVE-2023-23631 State: PUBLISHED Published: 2023-02-09T20:46:22.930Z Last Updated: 2025-03-10T21:14:10.912Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: ipfs Products: go-unixfsnode Problem Types: CWE-400 Description: github.com/ipfs/go-unixfsnode is an ADL IPLD prime node that wraps go-codec-dagpb's implementation of protobuf to enable pathing. In versions priot to 1.5.2 trying to read malformed HAMT sharded directories can cause panics and virtual memory leaks. If you are reading untrusted user input, an attacker can then trigger a panic. This is caused by bogus fanout parameter in the HAMT directory nodes. Users are advised to upgrade. There are
r a panic. This is caused by bogus fanout parameter in the HAMT directory nodes. Users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ipfs/go-unixfsnode/security/advisories/GHSA-4gj3-6r43-3wfc - https://github.com/ipfs/go-unixfsnode/commit/59050ea8bc458ae55246ae09243e6e165923e076 - https://github.com/ipfs/go-unixfsnode/commit/91b3d39d33ef0cd2aff2c95d50b2329350944b68 - https://github.com/ipfs/go-unixfsnode/commit/a4ed723727e0bdc2277158337c2fc0d82802d122
CVE ID: CVE-2023-23632 State: PUBLISHED Published: 2023-10-12T00:00:00.000Z Last Updated: 2025-11-03T19:27:59.824Z Vendors: n/a Products: n/a Problem Types: n/a Description: BeyondTrust Privileged Remote Access (PRA) versions 22.2.x to 22.4.x are vulnerable to a local authentication bypass. Attackers can exploit a flawed secret verification process in the BYOT shell jump sessions, allowing unauthorized access to jump items by guessing only the first character of the secret. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.compass-security.com/fileadmin/Research/Advisories/2023_03_CSNC-2022-018_PRA_Privilege_Escalation.txt
CVE ID: CVE-2023-23634 State: PUBLISHED Published: 2023-12-29T00:00:00 Last Updated: 2024-08-02T10:35:33.655Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in Documize version 5.4.2, allows remote attackers to execute arbitrary code via the user parameter of the /api/dashboard/activity endpoint. Additional Analyst Notes: - CVE Program Container: References: - https://herolab.usd.de/en/security-advisories/usd-2022-0066/