# CVEs published 2022-05-29

5 CVEs were published on May 29, 2022: 0 critical, 1 high. Days are UTC.

- [CVE-2022-31799](https://cve.now/CVE-2022-31799.md): Bottle before 0.12.20 mishandles errors during early request binding. (no CVSS, bottle)
- [CVE-2022-24967](https://cve.now/CVE-2022-24967.md): Black Rainbow NIMBUS before 3.7.0 allows stored Cross-site Scripting (XSS). (CVSS 6.5)
- [CVE-2022-31796](https://cve.now/CVE-2022-31796.md): libjpeg 1.63 has a heap-based buffer over-read in HierarchicalBitmapRequester::FetchRegion in hierarchicalbitmaprequester.cpp because the MC (no CVSS)
- [CVE-2022-1927](https://cve.now/CVE-2022-1927.md): Buffer Over-read in vim/vim (CVSS 7.8, vim/vim)
- [CVE-2022-1928](https://cve.now/CVE-2022-1928.md): Cross-site Scripting (XSS) - Stored in go-gitea/gitea (CVSS 4.4, go-gitea/gitea · code.gitea.io/gitea)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2022-05-29
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.