Open Source Vulnerabilities
ezstd,
Decompression bomb in ezstd:decompress_using_ddict/2 allows BEAM memory exhaustion via unbounded output buffer
ezstd/
Decompression bomb in ezstd:decompress_using_ddict/2 allows BEAM memory exhaustion via unbounded output buffer
Decompression bomb in ezstd:decompress_using_ddict/2 allows BEAM memory exhaustion via unbounded output buffer
Decompression bomb in ezstd:decompress_using_ddict/2 allows BEAM memory exhaustion via unbounded output buffer
Caddy: RFC 7230 §6.1 compliance issue / Hop-by-hop headers that leak through
Caddy: RFC 7230 §6.1 compliance issue / Hop-by-hop headers that leak through
Code Graph RAG structural tools follow out-of-root symlinks
Code Graph RAG: MCP paginated read_file path traversal / arbitrary file read
Code Graph RAG: MCP paginated read_file path traversal / arbitrary file read
org.springframework:spring-beans
TuxCare security update for org.springframework:spring-beans (1 CVE)
org.springframework:spring-beans
TuxCare security update for org.springframework:spring-beans (1 CVE)
OpenEMR: Missing Write ACL Allows Unauthorized Document Reassignment
OpenEMR: Missing Write ACL Allows Unauthorized Document Reassignment
OpenEMR: Username Enumeration via Pre-Authentication User Settings Loading
OpenEMR: Username Enumeration via Pre-Authentication User Settings Loading
OpenEMR: Unauthenticated Information Disclosure in admin.php Exposes Database Names and Versions
OpenEMR: Unauthenticated Information Disclosure in admin.php Exposes Database Names and Versions
OpenEMR: Unauthenticated Open Redirect via OIDC End Session Endpoint
OpenEMR: Unauthenticated Open Redirect via OIDC End Session Endpoint
OpenEMR: Missing authorization in person-search AJAX leaks patient demographics (name, DOB, phone, email)
OpenEMR: Missing authorization in person-search AJAX leaks patient demographics (name, DOB, phone, email)
OpenEMR: Weno `file_download.php`: missing ACL/CSRF truncates the e-prescribing pharmacy directory
OpenEMR: Weno `file_download.php`: missing ACL/CSRF truncates the e-prescribing pharmacy directory
OpenEMR: Missing authorization on QRDA Category I/III download endpoints
OpenEMR: Missing authorization on QRDA Category I/III download endpoints
org.springframework:spring-expression, org.springframework:spring-web
TuxCare security update for org.springframework (2 CVEs)
org.springframework:spring-expression/ org.springframework:spring-web
TuxCare security update for org.springframework (2 CVEs)
OpenEMR: Broken Access Control in controller.php Enables Insurance Routing Credential Hijack and PHI Enumeration
OpenEMR: Broken Access Control in controller.php Enables Insurance Routing Credential Hijack and PHI Enumeration
OpenEMR: Missing authorization in DORN `compendium_install.php` — non-admin destructive lab-compendium reinstall
OpenEMR: Missing authorization in DORN `compendium_install.php` — non-admin destructive lab-compendium reinstall
