Open Source Vulnerabilities
pillow
Pillow: TarIO negative size field causes infinite CPU-spin loop
pillow
Pillow: TarIO negative size field causes infinite CPU-spin loop
pillow
Pillow: Reachable undefined behavior in native integer operations, potentially leading to denial of service or logic integrity compromise
pillow
Pillow: Reachable undefined behavior in native integer operations, potentially leading to denial of service or logic integrity compromise
pillow
Pillow PDF append accepts malformed shared page-tree DAG causing resource exhaustion
pillow
Pillow PDF append accepts malformed shared page-tree DAG causing resource exhaustion
pillow
Pillow multi-frame loaders can reuse stale native image storage after mode transitions
pillow
Pillow multi-frame loaders can reuse stale native image storage after mode transitions
pillow
Pillow: BMP RLE decoder memory-amplification DoS via unbounded delta escape / absolute mode
pillow
Pillow: BMP RLE decoder memory-amplification DoS via unbounded delta escape / absolute mode
pillow
Pillow: Decompression bomb check bypass in SpiderImagePlugin.seek() leads to unbounded allocation DoS
pillow
Pillow: Decompression bomb check bypass in SpiderImagePlugin.seek() leads to unbounded allocation DoS
pillow
Pillow: Decompression-bomb protection bypass via multi-frame seek() in MPO and DCX (MpoImageFile.seek / DcxImageFile.seek)
pillow
Pillow: Decompression-bomb protection bypass via multi-frame seek() in MPO and DCX (MpoImageFile.seek / DcxImageFile.seek)
pillow
Pillow: Arrow export leaks stale heap memory when PILLOW_ALIGNMENT > 1
pillow
Pillow: Arrow export leaks stale heap memory when PILLOW_ALIGNMENT > 1
powershell
Out-of-Bounds Write in Google Brotli Decoder
powershell
Out-of-Bounds Write in Google Brotli Decoder
openbao
OpenBao 2.5.0 before 2.6.2 PKI allowed_ip_sans_cidr Bypass via CSR IP SANs
openbao
OpenBao 2.5.0 before 2.6.2 PKI allowed_ip_sans_cidr Bypass via CSR IP SANs
openbao
OpenBao 2.3.0 before 2.6.3 Missing Root Namespace Enforcement in Plugin Catalog APIs
openbao
OpenBao 2.3.0 before 2.6.3 Missing Root Namespace Enforcement in Plugin Catalog APIs
openbao
OpenBao 2.3.0 before 2.6.3 Incorrect Authorization via Policy Cache Namespace Traversal
openbao
OpenBao 2.3.0 before 2.6.3 Incorrect Authorization via Policy Cache Namespace Traversal
openbao
OpenBao before 2.6.3 Missing Header Check on Agent/Proxy Quit Endpoints
openbao
OpenBao before 2.6.3 Missing Header Check on Agent/Proxy Quit Endpoints
openbao
OpenBao 2.2.0 before 2.6.4 and 2.7.0 before 2.7.1 ACME EAB MAC Key Disclosure via Sanitized Configuration
openbao
OpenBao 2.2.0 before 2.6.4 and 2.7.0 before 2.7.1 ACME EAB MAC Key Disclosure via Sanitized Configuration
openbao
OpenBao before 2.6.4 and 2.7.0 before 2.7.1 Expired AppRole SecretID Authentication Bypass
openbao
OpenBao before 2.6.4 and 2.7.0 before 2.7.1 Expired AppRole SecretID Authentication Bypass
openbao
OpenBao before 2.6.3 ACL Bypass via Dropped Templated Policy Denial
openbao
OpenBao before 2.6.3 ACL Bypass via Dropped Templated Policy Denial
openbao
OpenBao before 2.6.3 Open Redirect via OIDC Identity Provider UI
openbao
OpenBao before 2.6.3 Open Redirect via OIDC Identity Provider UI
openbao
OpenBao before 2.6.4 and 2.7.0 before 2.7.1 Role-Based Rate Limit Quota Bypass via Request Parsing
openbao
OpenBao before 2.6.4 and 2.7.0 before 2.7.1 Role-Based Rate Limit Quota Bypass via Request Parsing
openbao
OpenBao before 2.6.3 Sensitive Data Leak in Audit Log via Malformed Parameters
openbao
OpenBao before 2.6.3 Sensitive Data Leak in Audit Log via Malformed Parameters
openbao
OpenBao before 2.6.4 and 2.7.0 before 2.7.1 Improper Audit Logging of Root Generation and Rekey Responses
openbao
OpenBao before 2.6.4 and 2.7.0 before 2.7.1 Improper Audit Logging of Root Generation and Rekey Responses
openbao
OpenBao before 2.6.4 and 2.7.0 before 2.7.1 Kubernetes Auth Method Token Renewal After Revocation
openbao
OpenBao before 2.6.4 and 2.7.0 before 2.7.1 Kubernetes Auth Method Token Renewal After Revocation
389-ds, 389-ds, 389-ds, 389-ds
Security update for 389-ds
rust-keylime
Security update for rust-keylime
rust-keylime
Security update for rust-keylime
389-ds, 389-ds
Security update for 389-ds
MozillaFirefox, MozillaFirefox
Security update for MozillaFirefox
MozillaFirefox/ MozillaFirefox
Security update for MozillaFirefox
libapr1, libtcnative-1-0, tomcat, libapr1, libtcnative-1-0, tomcat
Security update for libapr1, libtcnative-1-0, tomcat
libapr1/ libtcnative-1-0/ tomcat/ libapr1/ libtcnative-1-0/ tomcat
Security update for libapr1, libtcnative-1-0, tomcat
golang
Distrust compromised intermediate certificates in crypto/x509
golang
Distrust compromised intermediate certificates in crypto/x509
grafana
Cross-organization user modification and deletion via the SCIM API in Grafana Enterprise
grafana
Cross-organization user modification and deletion via the SCIM API in Grafana Enterprise
dotnet
Out-of-Bounds Write in Google Brotli Decoder
dotnet-sdk
Out-of-Bounds Write in Google Brotli Decoder
dotnet-sdk
Out-of-Bounds Write in Google Brotli Decoder
couchdb
Apache CouchDB: Auth bypass in prefixed _users and _replicator databases
couchdb
Apache CouchDB: Auth bypass in prefixed _users and _replicator databases
