# CVEs published 2022-12-10

6 CVEs were published on December 10, 2022: 1 critical, 0 high. Days are UTC.

- [CVE-2022-23485](https://cve.now/CVE-2022-23485.md): Invite code reuse via cookie manipulation in sentry (CVSS 6.4, getsentry sentry · sentry)
- [CVE-2022-4396](https://cve.now/CVE-2022-4396.md): RDFlib pyrdfa3 \_\_init\_\_.py \_get\_option cross site scripting (CVSS 3.5, RDFlib pyrdfa3 · pyrdfa3)
- [CVE-2022-4397](https://cve.now/CVE-2022-4397.md): morontt zend-blog-number-2 Comment Comment.php cross-site request forgery (CVSS 4.3, morontt zend-blog-number-2)
- [CVE-2022-4398](https://cve.now/CVE-2022-4398.md): Integer Overflow or Wraparound in radareorg/radare2 (CVSS 6.1, radareorg/radare2)
- [CVE-2022-4399](https://cve.now/CVE-2022-4399.md): TicklishHoneyBee nodau db.c sql injection (CVSS 5.5, TicklishHoneyBee nodau)
- [CVE-2022-45145](https://cve.now/CVE-2022-45145.md): egg-compile.scm in CHICKEN 5.x before 5.3.1 allows arbitrary OS command execution during package installation via escape characters in a .eg (CVSS 9.8)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2022-12-10
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.