# CVEs published 2022-11-19

5 CVEs were published on November 19, 2022: 1 critical, 0 high. Days are UTC.

- [CVE-2022-4064](https://cve.now/CVE-2022-4064.md): Dalli Meta Protocol request\_formatter.rb self.meta\_set injection (CVSS 6.3, Dalli)
- [CVE-2022-4065](https://cve.now/CVE-2022-4065.md): cbeust testng XML File Parser JarFileUtils.java testngXmlExistsInJar path traversal (CVSS 5.5, cbeust testng · org.testng:testng)
- [CVE-2022-4066](https://cve.now/CVE-2022-4066.md): davidmoreno onion Log response.c onion\_response\_flush allocation of resources (CVSS 3.5, davidmoreno onion)
- [CVE-2022-41938](https://cve.now/CVE-2022-41938.md): Cross site scripting vulnerability with discussion titles in flarum (CVSS 9.0, flarum framework · flarum/core)
- [CVE-2022-41939](https://cve.now/CVE-2022-41939.md): Credential exposure when running third-party builders in knative/func (CVSS 6.1, knative func)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2022-11-19
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.