{"items":[{"id":"CVE-2023-46248","published":"2023-10-31T15:11:46.707Z","updated":"2024-09-05T17:34:41.209Z","title":"Overwrite of builtin Cody commands facilitates RCE","severity":"CRITICAL","score":9.1,"vendor":"sourcegraph","product":"cody","kev":false,"epss":0.01264,"kevAdded":null},{"id":"CVE-2022-41943","published":"2022-11-22T00:00:00.000Z","updated":"2025-04-23T16:36:01.306Z","title":"Incorrect default permissions found in Sourcegraph","severity":"CRITICAL","score":9,"vendor":"sourcegraph","product":"sourcegraph","kev":false,"epss":0.01848,"kevAdded":null},{"id":"CVE-2022-41942","published":"2022-11-22T00:00:00.000Z","updated":"2025-04-23T16:36:07.093Z","title":"Sourcegraph vulnerable to Comand Injection via gitserver","severity":"HIGH","score":7.9,"vendor":"sourcegraph","product":"sourcegraph","kev":false,"epss":0.02833,"kevAdded":null},{"id":"CVE-2022-31155","published":"2022-08-01T18:40:28.000Z","updated":"2025-04-23T17:56:41.203Z","title":"Unauthorized overwriting of saved searches in Sourcegraph","severity":"MEDIUM","score":4.3,"vendor":"sourcegraph","product":"sourcegraph","kev":false,"epss":0.00506,"kevAdded":null},{"id":"CVE-2022-31154","published":"2022-08-01T18:40:10.000Z","updated":"2025-04-23T17:56:47.681Z","title":"Indirect Object Access in Sourcegraph Code Monitoring","severity":"MEDIUM","score":6.4,"vendor":"sourcegraph","product":"sourcegraph","kev":false,"epss":0.00506,"kevAdded":null},{"id":"CVE-2022-29171","published":"2022-05-05T23:25:09.000Z","updated":"2025-04-23T18:30:20.108Z","title":"Remote Code Execution in sourcegraph","severity":"MEDIUM","score":6.6,"vendor":"sourcegraph","product":"sourcegraph","kev":false,"epss":0.01353,"kevAdded":null},{"id":"CVE-2022-23642","published":"2022-02-18T22:15:11.000Z","updated":"2025-04-22T18:21:53.481Z","title":"Code Injection in Sourcegraph","severity":"HIGH","score":8.8,"vendor":"sourcegraph","product":"sourcegraph","kev":false,"epss":0.7431,"kevAdded":null},{"id":"CVE-2022-23643","published":"2022-02-15T21:25:10.000Z","updated":"2025-04-23T19:04:54.059Z","title":"Side-channel attack in Sourcegraph Code Monitors","severity":"MEDIUM","score":6.5,"vendor":"sourcegraph","product":"sourcegraph","kev":false,"epss":0.00801,"kevAdded":null},{"id":"CVE-2021-43823","published":"2021-12-13T19:55:10.000Z","updated":"2024-08-04T04:03:08.900Z","title":"Side-channel attack in Sourcegraph","severity":"MEDIUM","score":6.5,"vendor":"sourcegraph","product":"sourcegraph","kev":false,"epss":0.00865,"kevAdded":null},{"id":"CVE-2021-32787","published":"2021-08-02T22:00:12.000Z","updated":"2024-08-03T23:33:55.836Z","title":"Low risk information disclosure in Sourcegraph","severity":"LOW","score":3.1,"vendor":"sourcegraph","product":"sourcegraph","kev":false,"epss":0.00649,"kevAdded":null}]}