
Calvary Lutheran High School
Excellent
None
Excellent
None
Excellent
We, the faithful of the Roman Catholic Church in Philadelphia in communion with our Holy Father, shepherd of the universal Church, and our Archbishop, shepherd of the Church in Philadelphia, proclaim to everyone the Good News that Jesus Christ is the Light of the world, who offers to all who follow Him the light of life. Baptized into Christ Jesus and confirmed by the gift of the Holy Spirit, we desire to share this Light with all by proclaiming the Gospel of forgiveness and reconciliation to every person. We are one in our Churchโs teachings and in the variety of the gifts, services and ministries that we employ to help build up the Kingdom of God. We therefore commit ourselves to: โข Worship God in spirit and truth through โprayer without ceasing"โ, and particularly through the celebration of the Eucharist and the other sacraments of the Church; โข Create and nourish Christian community in the domestic church of the family, in the life of every parish, and in society as a whole; โข Proclaim in word and deed the Good News of Jesus Christ to all persons, inviting each of our sisters and brothers in the human community to share our faith and our mission; โข Teach the saving message of Christ so that all believers may come to deeper understanding, conversion and personal witness to Christ; โข Serve all our sisters and brothers, particularly the poor and needy, by generous acts of charity and by working together with all people of good will for justice and peace. We pray to Father, Son and Holy Spirit, through the intercession of Mary, the Immaculate Conception, to whose care the Archdiocese is consecrated, and through Saints Peter and Paul, the Archdiocesan patron. May the Lord of Light guide us in our earthly journey and to our heavenly home. Show more Show less
Security & Compliance Standards Overview
No incidents recorded for Calvary Lutheran High School in 2025.
No incidents recorded for Archdiocese of Philadelphia in 2025.
Calvary Lutheran High School cyber incidents detection timeline including parent company and subsidiaries
Archdiocese of Philadelphia cyber incidents detection timeline including parent company and subsidiaries
Last 3 Security & Risk Events by Company
Better Auth is an authentication and authorization library for TypeScript. In versions prior to 1.3.26, unauthenticated attackers can create or modify API keys for any user by passing that user's id in the request body to the `api/auth/api-key/create` route. `session?.user ?? (authRequired ? null : { id: ctx.body.userId })`. When no session exists but `userId` is present in the request body, `authRequired` becomes false and the user object is set to the attacker-controlled ID. Server-only field validation only executes when `authRequired` is true (lines 280-295), allowing attackers to set privileged fields. No additional authentication occurs before the database operation, so the malicious payload is accepted. The same pattern exists in the update endpoint. This is a critical authentication bypass enabling full an unauthenticated attacker can generate an API key for any user and immediately gain complete authenticated access. This allows the attacker to perform any action as the victim user using the api key, potentially compromise the user data and the application depending on the victim's privileges. Version 1.3.26 contains a patch for the issue.
Allstar is a GitHub App to set and enforce security policies. In versions prior to 4.5, a vulnerability in Allstarโs Reviewbot component caused inbound webhook requests to be validated against a hard-coded, shared secret. The value used for the secret token was compiled into the Allstar binary and could not be configured at runtime. In practice, this meant that every deployment using Reviewbot would validate requests with the same secret unless the operator modified source code and rebuilt the component - an expectation that is not documented and is easy to miss. All Allstar releases prior to v4.5 that include the Reviewbot code path are affected. Deployments on v4.5 and later are not affected. Those who have not enabled or exposed the Reviewbot endpoint are not exposed to this issue.
Multiple cross-site scripting (XSS) vulnerabilities with Calendar events in Liferay Portal 7.4.3.35 through 7.4.3.111, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.7, 7.4 update 35 through update 92, and 7.3 update 25 through update 36 allow remote attackers to inject arbitrary web script or HTML via a crafted payload injected into a userโs (1) First Name, (2) Middle Name or (3) Last Name text field.
Python Social Auth is a social authentication/registration mechanism. In versions prior to 5.6.0, upon authentication, the user could be associated by e-mail even if the `associate_by_email` pipeline was not included. This could lead to account compromise when a third-party authentication service does not validate provided e-mail addresses or doesn't require unique e-mail addresses. Version 5.6.0 contains a patch. As a workaround, review the authentication service policy on e-mail addresses; many will not allow exploiting this vulnerability.
Confidential Containers's Trustee project contains tools and components for attesting confidential guests and providing secrets to them. In versions prior to 0.15.0, the attestation-policy endpoint didn't check if the kbs-client submitting the request was actually authenticated (had the right key). This allowed any kbs-client to actually change the attestation policy. Version 0.15.0 fixes the issue.