Open Source Vulnerabilities
HTTP::Body versions before 1.23_01 for Perl lose track of chunk boundaries in chunked request bodies when a read ends inside a chunk
HTTP::Body versions before 1.23_01 for Perl lose track of chunk boundaries in chunked request bodies when a read ends inside a chunk
HTTP::Body versions before 1.23_01 for Perl allow CPU exhaustion via quadratic regex backtracking when parsing chunked request bodies
HTTP::Body versions before 1.23_01 for Perl allow CPU exhaustion via quadratic regex backtracking when parsing chunked request bodies
@modelcontextprotocol/client
TuxCare security update for @modelcontextprotocol/client (1 CVE)
@modelcontextprotocol/client
TuxCare security update for @modelcontextprotocol/client (1 CVE)
HTTP::Body versions before 1.23_01 for Perl drop mixed-case percent escapes from urlencoded form fields instead of decoding them
HTTP::Body versions before 1.23_01 for Perl drop mixed-case percent escapes from urlencoded form fields instead of decoding them
HTTP::Body versions before 1.23_01 for Perl allow memory exhaustion via an unbounded multipart part header block
HTTP::Body versions before 1.23_01 for Perl allow memory exhaustion via an unbounded multipart part header block
HTTP::Body versions before 1.23_01 for Perl allow CPU exhaustion via quadratic rescanning of a multipart body with a missing or malformed boundary
HTTP::Body versions before 1.23_01 for Perl allow CPU exhaustion via quadratic rescanning of a multipart body with a missing or malformed boundary
HTTP::Body versions before 1.23_01 for Perl leave the temporary file of an incomplete multipart upload on disk
HTTP::Body versions before 1.23_01 for Perl leave the temporary file of an incomplete multipart upload on disk
HTTP::Body versions before 1.23_01 for Perl allow memory and temporary file exhaustion via an unlimited number of form fields and multipart parts
HTTP::Body versions before 1.23_01 for Perl allow memory and temporary file exhaustion via an unlimited number of form fields and multipart parts
RE2JS: Quadratic-time denial of service in re2js lookbehind matching
RE2JS: Quadratic-time denial of service in re2js lookbehind matching
knative-kafka-broker-fips-1.20-controller
russh: Agent server never calls `Agent::confirm`, so keys added with the confirm constraint (`ssh-add -c`) sign without confirmation
russh: Agent server never calls `Agent::confirm`, so keys added with the confirm constraint (`ssh-add -c`) sign without confirmation
@hono/node-server
TuxCare security update for @hono/node-server (1 CVE)
@hono/node-server
TuxCare security update for @hono/node-server (1 CVE)
serialize-javascript
TuxCare security update for serialize-javascript (1 CVE)
serialize-javascript
TuxCare security update for serialize-javascript (1 CVE)
nodemailer
TuxCare security update for nodemailer (2 CVEs)
nodemailer
TuxCare security update for nodemailer (2 CVEs)
ip-address
TuxCare security update for ip-address (1 CVE)
ip-address
TuxCare security update for ip-address (1 CVE)
@hono/node-server
TuxCare security update for @hono/node-server (1 CVE)
@hono/node-server
TuxCare security update for @hono/node-server (1 CVE)
tmp
TuxCare security update for tmp (1 CVE)
browserslist
TuxCare security update for browserslist (1 CVE)
browserslist
TuxCare security update for browserslist (1 CVE)
tmp
TuxCare security update for tmp (2 CVEs)
rollup
TuxCare security update for rollup (2 CVEs)
org.springframework.cloud:spring-cloud-function-adapter-aws, org.springframework.cloud:spring-cloud-function-adapter-azure, org.springframework.cloud:spring-cloud-function-context, org.springframework.cloud:spring-cloud-function-web
TuxCare security update for org.springframework.cloud (5 CVEs)
org.springframework.cloud:spring-cloud-function-adapter-aws/ org.springframework.cloud:spring-cloud-function-adapter-azure/ org.springframework.cloud:spring-cloud-function-context/ org.springframework.cloud:spring-cloud-function-web
TuxCare security update for org.springframework.cloud (5 CVEs)
piscina
TuxCare security update for piscina (2 CVEs)
apicurio-registry, apicurio-registry
apicurio-registry, apicurio-registry
Out-of-bounds write in Zephyr Ethernet L2 when adding the link-layer header to a forwarded packet
Out-of-bounds write in Zephyr Ethernet L2 when adding the link-layer header to a forwarded packet
Unvalidated pin index in GPIO syscall handlers allows out-of-bounds kernel writes from user mode
Unvalidated pin index in GPIO syscall handlers allows out-of-bounds kernel writes from user mode
org.springframework.cloud:spring-cloud-config-server
TuxCare security update for org.springframework.cloud:spring-cloud-config-server (3 CVEs)
org.springframework.cloud:spring-cloud-config-server
TuxCare security update for org.springframework.cloud:spring-cloud-config-server (3 CVEs)
