Vulnerabilities > Contribsys > Sidekiq > 6.3.1

DATE CVE VULNERABILITY TITLE RISK
2023-09-14 CVE-2023-26141 Insufficient Verification of Data Authenticity vulnerability in Contribsys Sidekiq
Versions of the package sidekiq before 7.1.3 are vulnerable to Denial of Service (DoS) due to insufficient checks in the dashboard-charts.js file.
network
low complexity
contribsys CWE-345
4.9
2022-01-21 CVE-2022-23837 Allocation of Resources Without Limits or Throttling vulnerability in multiple products
In api.rb in Sidekiq before 5.2.10 and 6.4.0, there is no limit on the number of days when requesting stats for the graph.
network
low complexity
contribsys debian CWE-770
7.5