# CVEs published 2023-06-10

4 CVEs were published on June 10, 2023: 0 critical, 3 high. Days are UTC.

- [CVE-2023-26132](https://cve.now/CVE-2023-26132.md): Versions of the package dottie before 2.0.4 are vulnerable to Prototype Pollution due to insufficient checks, via the set() function and the (CVSS 7.5, dottie)
- [CVE-2023-3188](https://cve.now/CVE-2023-3188.md): Server-Side Request Forgery (SSRF) in owncast/owncast (CVSS 8.3, owncast/owncast)
- [CVE-2023-3190](https://cve.now/CVE-2023-3190.md): Improper Encoding or Escaping of Output in nilsteampassnet/teampass (CVSS 3.5, nilsteampassnet/teampass)
- [CVE-2023-3191](https://cve.now/CVE-2023-3191.md): Cross-site Scripting (XSS) - Stored in nilsteampassnet/teampass (CVSS 8.1, nilsteampassnet/teampass)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-06-10
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.