Open Source Vulnerabilities

spark-4.0-scala-2.13

spark-3.5-scala-2.12, spark-3.5-scala-2.13

github.com/siyuan-note/siyuan/kernel

SiYuan: Graph endpoints omit the publish-password tier: anonymous readers receive block-level content of password-protected documents

github.com/siyuan-note/siyuan/kernel

SiYuan: Missing publish-access check on getBlockBreadcrumb, getRefText, and getBlockTreeInfos discloses content and metadata of protected/forbidden documents

github.com/siyuan-note/siyuan/kernel

SiYuan: Password (protected) tier omitted in the attribute-view/database publish filter: Reader receives rows of protected documents without the password (publish mode)

crossplane-provider-aws-lambda-fips

crossplane-provider-aws-lambda-fips

crossplane-provider-aws-keyspaces-fips

crossplane-provider-aws-keyspaces-fips

github.com/siyuan-note/siyuan/kernel

SiYuan: Second-order SSTI to arbitrary SQL via attribute-view template column (queryBlocks): malicious imported package executes SQL on victim kernel

redpanda-25.1-fips

redpanda-25.1-fips

github.com/siyuan-note/siyuan/kernel

SiYuan: Missing publish-access filter on getFileAnnotation discloses private PDF annotations of forbidden/protected documents (publish mode)

cilium-1.20

cilium-1.20

cilium-1.20

cilium-1.20

cilium-1.20

cilium-1.20

cilium-1.20

prometheus-node-exporter-fips-1.9

prometheus-node-exporter-fips-1.9

crossplane-provider-aws-sqs, crossplane-provider-aws-sqs

crossplane-provider-aws-sqs, crossplane-provider-aws-sqs

prometheus-node-exporter-1.9

prometheus-node-exporter-1.9

MOOS-IvP through 24.8.1 alog Splitting Path Traversal on Windows

MOOS core-moos through 10.4.0 MOOSDB Out-of-Bounds Read via Short Packet

MOOS core-moos through 10.4.0 Off-by-One Buffer Overflow in Serial Telegram Handling

MOOS core-moos through 10.4.0 MOOSDB HTTP Pages Stored Cross-Site Scripting

MOOS core-moos through 10.4.0 Remote Process Termination via Hard-Coded Multicast Passphrase

MOOS core-moos through 10.4.0 MOOSDB HTTP Server Resource Exhaustion

MOOS-IvP through 24.8.1 pMarineViewer Unbounded Memory Consumption via NODE_REPORT

MOOS-IvP through 24.8.1 uFldShoreBroker Unbounded Community State Retention

MOOS-IvP through 24.8.1 pRealm Unbounded REALMCAST_REQ Subscription Denial of Service

MOOS-IvP through 24.8.1 uFldNodeComms Quadratic Processing Denial of Service

MOOS-IvP through 24.8.1 BHV_IPF Demultiplexer Memory Exhaustion via Packet Count

MOOS-IvP through 24.8.1 Out-of-Bounds Read in isBraced, isQuoted and isChevroned

MOOS core-moos through 10.4.0 MOOSDB Accept Loop Denial of Service

MOOS core-moos through 10.4.0 MOOSDB Denial of Service via Unbounded Packet Allocation

MOOS core-moos through 10.4.0 MOOSDB Denial of Service via Negative Serialized String Length

MOOS core-moos through 10.4.0 MOOSDB Pre-Authentication Heap Overflow via Negative Packet Length

MOOS-IvP through 24.8.1 alogsplit Command Injection via Input Pathname

MOOS-IvP through 24.8.1 Out-of-Bounds Write via Unvalidated IvP Payload Counts

MOOS-IvP through 24.8.1 Buffer Overflow in IvP Function String Decoders

MOOS essential-moos through 10.0.1 pMOOSBridge Heap Corruption via Negative UDP Length

MOOS-IvP through 24.8.1 uFldNodeBroker Unauthenticated Shore Route Enrollment

MOOS-IvP through 24.8.1 uFldShoreBroker Bridge Route Injection via Unverified Node Ping

MOOS essential-moos through 10.0.1 pShare Unauthorized Runtime Route Reconfiguration

MOOS core-moos through 10.4.0 MOOSDB Message Source Spoofing via Wire Identity