Open Source Vulnerabilities

serialize-javascript

TuxCare security update for serialize-javascript (1 CVE)

com.fasterxml.jackson.core:jackson-databind

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (7 CVEs)

com.fasterxml.jackson.core:jackson-databind

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (4 CVEs)

drupal/oidc

grafana-pyroscope-fips-2.3

grafana-pyroscope-fips-2.3

com.fasterxml.jackson.core:jackson-databind

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (4 CVEs)

drupal/stage_file_proxy

drupal/sign_widget

Highcharts Core: AST `DOMParser` fallback assigns unsanitized markup to `innerHTML` during print

com.fasterxml.jackson.core:jackson-databind

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (5 CVEs)

drupal/oauth_login_oauth2

org.springframework.cloud:spring-cloud-stream

TuxCare security update for org.springframework.cloud:spring-cloud-stream (4 CVEs)

com.fasterxml.jackson.core:jackson-databind

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (3 CVEs)

drupal/bulk_update_user_roles

drupal/s3fs

Highcharts Dashboards: `__proto__` data table id writes sync listeners to `Object.prototype`

com.fasterxml.jackson.core:jackson-databind

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (4 CVEs)

PostgreSQL Anonymizer: statistics can expose some of the original data after statistic masking

PostgreSQL Anonymizer: anon.partial() and anon.partial_email() can reveal the whole data

PostgreSQL Anonymizer: Function declared with SQL-standard syntax leak anonymized data

PostgreSQL Anonymizer: A masked role reads the authentic data of masked tables through a masking rule with a sub-query

PostgreSQL Anonymizer: Masking rules of the tables are not applied through security_invoker views

PostgreSQL Anonymizer: Masked partitions and child tables are not masked when they are queried through their parent

PostgreSQL Anonymizer: Cached plans bypass transparent dynamic masking after a role change or a new masking rule

PostgreSQL Anonymizer: The secret salt and shift of anon are readable by any role in pg_roles or pg_db_role_setting

PostgreSQL Anonymizer: Masked roles can read the statistics of masked columns in pg_stats

PostgreSQL Anonymizer: Unbounded image-decode memory allocation (DoS) in anon.image_blur()

PostgreSQL Anonymizer: Unbounded memory allocation (DoS) in range-based dummy functions

PostgreSQL Anonymizer: Data-modifying CTEs bypass the read-only restriction of masked roles

kubevirt1.9

Security update for kubevirt1.9

Highcharts Grid: custom icon definition objects written with raw `setAttribute` on `<path>`

com.fasterxml.jackson.core:jackson-databind

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (5 CVEs)

opensearch-k8s-operator-fips-2

opensearch-k8s-operator-fips-2

com.fasterxml.jackson.core:jackson-databind

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (5 CVEs)

Highcharts Grid Pro: cell-renderer `attributes` map written with raw `setAttribute`

drupal/fasttoggle

drupal/fasttoggle

drupal/captcha

com.fasterxml.jackson.core:jackson-databind

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (6 CVEs)

calico-3.29-apiserver, calico-3.29-app-policy, calico-3.29-calicoctl, calico-3.29-cni, calico-3.29-felix, calico-3.29-key-cert-provisioner, calico-3.29-kube-controllers, calico-3.29-node, calico-3.29-pod2daemon, calico-3.29-typha-client, calico-3.29-typhad

calico-3.29-apiserver, calico-3.29-app-policy, calico-3.29-calicoctl, calico-3.29-cni, calico-3.29-felix, calico-3.29-key-cert-provisioner, calico-3.29-kube-controllers, calico-3.29-node, calico-3.29-pod2daemon, calico-3.29-typha-client, calico-3.29-typhad

step-issuer-fips

com.fasterxml.jackson.core:jackson-databind

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (5 CVEs)

request

TuxCare security update for request (1 CVE)

@octokit/request-error

TuxCare security update for @octokit/request-error (1 CVE)

frankenphp-8.3

com.fasterxml.jackson.core:jackson-databind

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (4 CVEs)

@octokit/request

TuxCare security update for @octokit/request (1 CVE)