Approved changes feed: RSS · Atom
cpe:2.3:a:contribsys:sidekiq:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Contribsys (11b339e3-a22e-5ffe-8610-526204dba231) |
|---|---|
| Product | Sidekiq (e502ae8e-8a77-5eea-a55c-e52dc6878c05) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/mperham/sidekiq |
purl2cpe | 2026-06-01 10:18:10.601366 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-46951 |
vulnerable | 2026-06-08 06:14:23.702425 |
Details available
Cross Site Scripting vulnerability in Contribsys Sidekiq v.6.5.8 allows a remote attacker to obtain sensitive information via a crafted payload to the uniquejobs function.
Published: 2024-03-01T00:00:00.000Z
Updated: 2025-04-22T15:45:39.488Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-46950 |
vulnerable | 2026-06-08 06:14:23.700203 |
Details available
Cross Site Scripting vulnerability in Contribsys Sidekiq v.6.5.8 allows a remote attacker to obtain sensitive information via a crafted URL to the filter functions.
Published: 2024-03-01T00:00:00.000Z
Updated: 2024-09-16T19:57:04.342Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-26141 |
vulnerable | 2026-06-08 05:57:38.709928 |
Details available
HIGH (7.5)
Versions of the package sidekiq before 7.1.3 are vulnerable to Denial of Service (DoS) due to insufficient checks in the dashboard-charts.js file. An attacker can exploit this vulnerability by manipulating the localStorage value which will cause excessive polling requests.
Published: 2023-09-14T05:00:00.986Z
Updated: 2024-09-25T18:16:01.457Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-1892 |
vulnerable | 2026-06-08 05:52:37.176429 |
Cross-site Scripting (XSS) - Reflected in sidekiq/sidekiq
HIGH (8.3)
Cross-site Scripting (XSS) - Reflected in GitHub repository sidekiq/sidekiq prior to 7.0.8.
Published: 2023-04-05T00:00:00.000Z
Updated: 2025-02-10T19:45:53.353Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-23837 |
vulnerable | 2026-06-08 05:40:59.260961 |
Details available
In api.rb in Sidekiq before 5.2.10 and 6.4.0, there is no limit on the number of days when requesting stats for the graph. This overloads the system, affecting the Web UI, and makes it unavailable to users.
Published: 2022-01-21T00:00:00.000Z
Updated: 2024-08-03T03:51:45.990Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-30151 |
vulnerable | 2026-06-08 05:31:46.961535 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.