Open Source Vulnerabilities
Laravel MongoDB `whereDoesntHave` misses deny records for numeric string IDs
Laravel MongoDB `whereDoesntHave` misses deny records for numeric string IDs
fio
Updated fio package fixes a security vulnerability
react-dev-utils
TuxCare security update for react-dev-utils (2 CVEs)
react-dev-utils
TuxCare security update for react-dev-utils (2 CVEs)
node-fetch
TuxCare security update for node-fetch (2 CVEs)
node-fetch
TuxCare security update for node-fetch (2 CVEs)
kyverno-background-controller-fips-1.18
X.Org Server Glamor CopyArea Heap Buffer Overflow
@babel/core
TuxCare security update for @babel/core (1 CVE)
@babel/core
TuxCare security update for @babel/core (1 CVE)
FOG: Authenticated low-privileged API user can modify Storage Nodes and reach root command execution
FOG: Authenticated low-privileged API user can modify Storage Nodes and reach root command execution
org.springframework:spring-context, org.springframework:spring-core, org.springframework:spring-expression
TuxCare security update for org.springframework (3 CVEs)
org.springframework:spring-context/ org.springframework:spring-core/ org.springframework:spring-expression
TuxCare security update for org.springframework (3 CVEs)
crossplane-provider-gcp-beta-container-fips
org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat-catalina
TuxCare security update for 3 packages (5 CVEs)
org.apache.tomcat.embed:tomcat-embed-core/ org.apache.tomcat:tomcat/ org.apache.tomcat:tomcat-catalina
TuxCare security update for 3 packages (5 CVEs)
USB Test: Heap-based Buffer Overflow in getSectorSize via untrusted DISK_GEOMETRY.BytesPerSector leads to RCE/DoS
USB Test: Heap-based Buffer Overflow in getSectorSize via untrusted DISK_GEOMETRY.BytesPerSector leads to RCE/DoS
org.springframework.data:spring-data-mongodb
TuxCare security update for org.springframework.data:spring-data-mongodb (1 CVE)
org.springframework.data:spring-data-mongodb
TuxCare security update for org.springframework.data:spring-data-mongodb (1 CVE)
drupal/core
TuxCare security update for drupal/core (1 CVE)
drupal/core
TuxCare security update for drupal/core (1 CVE)
Shopper: read-only team permissions allow administrator creation and permission escalation
Shopper: read-only team permissions allow administrator creation and permission escalation
knative-kafka-broker-1.23-controller
org.springframework.data:spring-data-keyvalue
TuxCare security update for org.springframework.data:spring-data-keyvalue (1 CVE)
org.springframework.data:spring-data-keyvalue
TuxCare security update for org.springframework.data:spring-data-keyvalue (1 CVE)
SimulationCraft: Heap-Based Buffer Overflow / Out-of-Bounds Write in SimulationCraft's gem_id Array
SimulationCraft: Heap-Based Buffer Overflow / Out-of-Bounds Write in SimulationCraft's gem_id Array
X.Org Server RandR ChangeProviderProperty Heap Buffer Overflow
X.Org Server RandR ChangeProviderProperty Heap Buffer Overflow
epiphany
Security update for epiphany
mtdowling/jmespath.php
TuxCare security update for mtdowling/jmespath.php (1 CVE)
mtdowling/jmespath.php
TuxCare security update for mtdowling/jmespath.php (1 CVE)
YosemiteCrew: Missing organization authorization on service and PMS library/template routes
YosemiteCrew: Missing organization authorization on service and PMS library/template routes
cadvisor
Security update for cadvisor
