Open Source Vulnerabilities

mastodon

Destroying OAuth Applications doesn't notify Streaming of Access Tokens being destroyed in mastodon

mastodon

Lack of media type verification of Activity Streams objects allows impersonation of remote accounts

helm

Dependency management path traversal in helm

helm

Helm's Missing YAML Content Leads To Panic

espocrm

artifactory

argo-cd

Argo CD vulnerable to Bypassing of Brute Force Protection via Application Crash and In-Memory Data Loss

artifactory

airflow

Apache Airflow: Overly broad default permissions for Viewer/Ops (audit logs)

argo-cd

Argo CD Denial of Service (DoS) Vulnerability Due to Unsafe Array Modification in Multi-threaded Environment

artifactory

argo-cd

Argo CD vulnerable to Bypassing of Rate Limit and Brute Force Protection Using Cache Overflow

airflow

Apache Airflow: Dag Code and Import Error Permissions Ignored

airflow

Apache Airflow: Ignored Airflow Permissions

puccinier

Puccinier is unmainted.

emacs

Updated emacs packages fix security vulnerabilities

microcode

Updated microcode packages fix security vulnerabilities

opensc

Updated opensc packages fix security vulnerability

aide, mhash

Updated aide & mhash packages fix security vulnerability

squid

Updated squid packages fix security vulnerabilities

cbor-java

Security exception in co.nstant.in.cbor.CborDecoder.decodeNext

libspdm

Heap-buffer-overflow in libspdm_copy_mem

mediawiki, mediawiki

mediawiki - security update

util-linux, util-linux

util-linux - security update

kanidm, kanidm

Security update for kanidm

Cross-Site Request Forgery (CSRF) Leading to Remote Code Execution in parisneo/lollms-webui

glib

Unsoundness in `Iterator` and `DoubleEndedIterator` impls for `glib::VariantStrIter`