Open Source Vulnerabilities

fisharebest/webtrees

Webtrees Path Traversal vulnerability

c-ares

Updated c-ares packages fix security vulnerabilities

Privileged User using traversal to read system files

scrapy, scrapy

Duplicate Advisory: ReDos vulnerability of XMLFeedSpider

python-scrapy, python-scrapy, python-scrapy

scrapy

python-scrapy, python-scrapy, python-scrapy, python-scrapy

wasmedge

Container-overflow in WasmEdge::LLVM::Compiler::compile

javaparser

Security exception in com.github.javaparser.GeneratedJavaParser.Expression

Unrestricted Upload of File with Dangerous Type in freescout-helpdesk/freescout

ReDoS Vulnerability in scrapy/scrapy's XMLFeedSpider

chromium

chromium - security update

github.com/cosmos/cosmos-sdk, github.com/cosmos/cosmos-sdk

ASA-2024-005: Potential slashing evasion during re-delegation

com.hazelcast:hazelcast, com.hazelcast:hazelcast, com.hazelcast:hazelcast, com.hazelcast:hazelcast, com.hazelcast:hazelcast, com.hazelcast:hazelcast, com.hazelcast:hazelcast-all, com.hazelcast:hazelcast-all

Missing permission checks on Hazelcast client protocol

openmage/magento-lts, openmage/magento-lts

Magento LTS vulnerable to stored XSS in admin file form

activestorage, activestorage

Rails has possible Sensitive Session Information Leak in Active Storage

actionpack, actionpack, rails, rails

Rails has possible XSS Vulnerability in Action Controller

actionpack

Rails has possible ReDoS vulnerability in Accept header parsing in Action Dispatch

Improper validation of document removal parameter

azure-uamqp-python, azure-uamqp-python, azure-uamqp-python