Open Source Vulnerabilities

Uncontrolled Resource Consumption vulnerability in ArgoCD's repo server

,

Remote code execution in datalens-ui

JumpServer vulnerable to Jinja2 template injection in Ansible leads to RCE in Celery

JumpServer's insecure Ansible playbook validation leads to RCE in Celery

JumpServer allows nn authorized attacker to get sensitive information in playbook files when playbook_id is leaked

JumpServer Direct Object Reference (IDOR) Vulnerability in File Manager Bulk Transfer Functionality

Apache Fineract: Under certain circumstances, this vulnerability allowed users, without specific permissions, to escalate their privileges to any role.

Apache Fineract: Under certain system configurations, the sqlSearch parameter was vulnerable to SQL injection attacks, potentially allowing attackers to manipulate database queries.

Apache Fineract: Under certain system configurations, the sqlSearch parameter for specific endpoints was vulnerable to SQL injection attacks, potentially allowing attackers to manipulate database queries.

EasyCorp EasyAdmin Autocomplete autocomplete.js cross site scripting

Swift Prometheus un-sanitized metric name or labels can be used to take over exported metrics