Open Source Vulnerabilities

Angular: SSR XSS via Unescaped Processing Instruction (<?...?>) Nodes in Fallback Raw-Content Elements

Consul vulnerable to a denial of service in the native RPC listener

@babel/core, @babel/helpers, @babel/plugin-syntax-class-properties, @babel/runtime, @babel/runtime-corejs2, @babel/runtime-corejs3, @babel/traverse, @babel/types

TuxCare security update for @babel (1 CVE)

Consul vulnerable to an authorization bypass in the catalog node-write path

grafana-cloudmonitoring-datasource-fips

commercial-gitlab-workhorse-ee-19.1

commercial-gitlab-workhorse-ee-19.1

commercial-gitlab-workhorse-ee-19.1

Angular: Sanitization bypass via directive host bindings on concrete host elements in @angular/core and @angular/compiler

commercial-gitlab-rails-ee-assets-19.1

commercial-gitlab-rails-ee-assets-19.1

commercial-gitlab-rails-ee-assets-19.1

commercial-gitlab-rails-ee-assets-19.1

commercial-gitlab-rails-ee-assets-19.1

commercial-gitlab-rails-ee-assets-19.1

commercial-gitlab-rails-ee-assets-19.1

commercial-gitlab-rails-ee-assets-19.1

commercial-gitlab-rails-ee-assets-19.1

commercial-gitlab-rails-ee-assets-19.1

commercial-gitlab-rails-ee-assets-19.1

commercial-gitlab-rails-ee-assets-19.1

commercial-gitlab-rails-ee-assets-19.1

commercial-gitlab-rails-ee-assets-19.1

commercial-gitlab-rails-ee-assets-19.1

commercial-gitlab-rails-ee-assets-19.1

commercial-gitlab-rails-ee-assets-19.1

commercial-gitlab-rails-ee-assets-19.1

commercial-gitlab-rails-ee-assets-19.1

commercial-gitlab-rails-ee-assets-19.1

commercial-gitlab-rails-ee-assets-19.1

commercial-gitlab-rails-ee-assets-19.1

commercial-gitlab-rails-ee-assets-19.1

commercial-gitlab-rails-ee-assets-19.1

commercial-gitlab-rails-ee-assets-19.1

commercial-gitlab-rails-ee-assets-19.1

Angular: SSRF and Cross-Origin Credential Disclosure via URL Resolution Discrepancy in SSR

grafana-mssql-datasource-fips

grafana-loki-datasource-fips

Server-side request forgery in the Session Manager port forwarding functionality in AWS Systems Manager Agent

grafana-loki-datasource-fips

crossplane-provider-aws-emrcontainers-fips

crossplane-provider-aws-emrcontainers

commercial-gitlab-workhorse-ee-19.1

commercial-gitlab-workhorse-ee-19.1

commercial-gitlab-workhorse-ee-19.1

Concrete CMS 8.3.0 through 9.5.2 is vulnerable to an authorization bypass through user-controlled key (cross-calendar IDOR) in the Calendar event edit dialog

zstd-jni-java, zstd-jni-java, zstd-jni-java

zstd-jni-java, zstd-jni-java, zstd-jni-java

netty, netty, netty

tesseract, tesseract, tesseract