Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    PYSEC-2024-240
    Fix available
    Packages

    mlflow

    Summary

    Published
    23 Feb 2024
    PYSEC-2024-241
    Fix available
    Packages

    mlflow

    Summary

    Published
    23 Feb 2024
    CVE-2024-24310
    No fix available
    Packages

    Summary

    Published
    23 Feb 2024
    CVE-2024-24309
    No fix available
    Packages

    Summary

    Published
    23 Feb 2024
    CVE-2024-21423
    No fix available
    Packages

    Summary

    Published
    23 Feb 2024
    CVE-2024-27133
    No fix available
    Packages

    Summary

    Insufficient sanitization in MLflow leads to XSS when running a recipe that uses an untrusted dataset.

    Published
    23 Feb 2024
    CVE-2024-27132
    No fix available
    Packages

    Summary

    Insufficient sanitization in MLflow leads to XSS when running an untrusted recipe.

    Published
    23 Feb 2024
    USN-6653-1
    Fix available
    Packages

    linux-azure-5.15, linux-azure-fde-5.15, linux-gcp-5.15, linux-gkeop-5.15, linux-hwe-5.15, linux-ibm-5.15, linux-intel-iotg-5.15, linux-lowlatency-hwe-5.15, linux-oracle-5.15, linux, linux-azure, linux-azure-fde, linux-gcp, linux-gkeop, linux-ibm, linux-intel-iotg, linux-kvm, linux-nvidia, linux-oracle, linux-raspi

    Summary

    linux, linux-azure, linux-azure-5.15, linux-azure-fde, linux-azure-fde-5.15, linux-gcp, linux-gcp-5.15, linux-gkeop, linux-gkeop-5.15, linux-hwe-5.15, linux-ibm, linux-ibm-5.15, linux-intel-iotg, linux-intel-iotg-5.15, linux-kvm, linux-lowlatency-hwe-5.15, linux-nvidia, linux-oracle, linux-oracle-5.15, linux-raspi vulnerabilities

    Published
    23 Feb 2024
    CVE-2021-33162
    No fix available
    Packages

    Summary

    Published
    23 Feb 2024
    CVE-2021-33161
    No fix available
    Packages

    Summary

    Published
    23 Feb 2024
    CVE-2021-33158
    No fix available
    Packages

    Summary

    Published
    23 Feb 2024
    CVE-2021-33157
    No fix available
    Packages

    Summary

    Published
    23 Feb 2024
    CVE-2021-33146
    No fix available
    Packages

    Summary

    Published
    23 Feb 2024
    CVE-2021-33145
    No fix available
    Packages

    Summary

    Published
    23 Feb 2024
    CVE-2021-33142
    No fix available
    Packages

    Summary

    Published
    23 Feb 2024
    CVE-2021-33141
    No fix available
    Packages

    Summary

    Published
    23 Feb 2024
    USN-6652-1
    Fix available
    Packages

    linux-azure

    Summary

    linux-azure vulnerabilities

    Published
    23 Feb 2024
    CVE-2024-1834
    No fix available
    Packages

    Summary

    Published
    23 Feb 2024
    CVE-2024-1833
    No fix available
    Packages

    Summary

    Published
    23 Feb 2024
    CVE-2024-1832
    No fix available
    Packages

    Summary

    Published
    23 Feb 2024
    CVE-2023-51394
    No fix available
    Packages

    Summary

    Published
    23 Feb 2024
    CVE-2023-51393
    No fix available
    Packages

    Summary

    Published
    23 Feb 2024
    USN-6651-1
    Fix available
    Packages

    linux-hwe-6.5

    Summary

    linux, linux-aws, linux-gcp, linux-hwe-6.5, linux-laptop, linux-oracle, linux-raspi, linux-starfive vulnerabilities

    Published
    23 Feb 2024
    CVE-2024-1831
    No fix available
    Packages

    Summary

    Published
    23 Feb 2024
    CVE-2024-1830
    No fix available
    Packages

    Summary

    Published
    23 Feb 2024
    CVE-2022-43842
    Fix available
    Packages

    Summary

    Published
    23 Feb 2024
    SUSE-SU-2024:0608-1
    Fix available
    Packages

    MozillaThunderbird, MozillaThunderbird, MozillaThunderbird

    Summary

    Security update for MozillaThunderbird

    Published
    23 Feb 2024
    SUSE-SU-2024:0607-1
    Fix available
    Packages

    MozillaFirefox, MozillaFirefox, MozillaFirefox, MozillaFirefox, MozillaFirefox, MozillaFirefox, MozillaFirefox, MozillaFirefox, MozillaFirefox, MozillaFirefox, MozillaFirefox, MozillaFirefox, MozillaFirefox

    Summary

    Security update for MozillaFirefox

    Published
    23 Feb 2024
    GHSA-whh8-fjgc-qp73
    Fix available
    Packages

    onnx

    Summary

    Onnx Directory Traversal vulnerability

    Published
    23 Feb 2024
    GHSA-h8wv-9h96-m4hr
    Fix available
    Packages

    onnx

    Summary

    Onnx Out-of-bounds Read vulnerability

    Published
    23 Feb 2024
    GHSA-rc6h-qwj9-2c53
    Fix available
    Packages

    org.apache.dolphinscheduler:dolphinscheduler-master

    Summary

    Apache DolphinScheduler vulnerable to arbitrary JavaScript execution as root for authenticated users

    Published
    23 Feb 2024
    CVE-2024-1829
    No fix available
    Packages

    Summary

    Published
    23 Feb 2024
    CVE-2024-1828
    No fix available
    Packages

    Summary

    Published
    23 Feb 2024
    CVE-2024-1827
    No fix available
    Packages

    Summary

    Published
    23 Feb 2024
    AZL-35146
    Fix available
    Packages

    pytorch

    Summary

    CVE-2024-27318 affecting package pytorch for versions less than 2.2.2-1

    Published
    23 Feb 2024
    AZL-34464
    Fix available
    Packages

    pytorch

    Summary

    CVE-2024-27318 affecting package pytorch for versions less than 2.0.0-6

    Published
    23 Feb 2024
    AZL-34465
    Fix available
    Packages

    pytorch

    Summary

    CVE-2024-27319 affecting package pytorch for versions less than 2.0.0-4

    Published
    23 Feb 2024
    AZL-35148
    Fix available
    Packages

    pytorch

    Summary

    CVE-2024-27319 affecting package pytorch for versions less than 2.2.2-1

    Published
    23 Feb 2024
    PYSEC-2024-222
    Fix available
    Packages

    onnx

    Summary

    Published
    23 Feb 2024
    PYSEC-2024-223
    Fix available
    Packages

    onnx

    Summary

    Published
    23 Feb 2024
    GHSA-2fc9-xpp8-2g9h
    Fix available
    Packages

    @backstage/backend-common, @backstage/backend-common, @backstage/backend-common

    Summary

    `@backstage/backend-common` vulnerable to path traversal through symlinks

    Published
    23 Feb 2024
    USN-6650-1
    Fix available
    Packages

    linux-oem-6.1

    Summary

    inux-oem-6.1 vulnerability

    Published
    23 Feb 2024
    CVE-2024-27319
    Fix available
    Packages

    Summary

    Published
    23 Feb 2024
    CVE-2024-27318
    Fix available
    Packages

    Summary

    Published
    23 Feb 2024
    CVE-2024-1826
    No fix available
    Packages

    Summary

    Published
    23 Feb 2024
    CVE-2024-1825
    No fix available
    Packages

    Summary

    Published
    23 Feb 2024
    CVE-2023-51392
    No fix available
    Packages

    Summary

    Published
    23 Feb 2024
    CVE-2024-23320
    Fix available
    Packages

    Summary

    Apache DolphinScheduler: Arbitrary js execution as root for authenticated users

    Published
    23 Feb 2024
    CVE-2024-1824
    No fix available
    Packages

    Summary

    Published
    23 Feb 2024
    CVE-2024-1823
    No fix available
    Packages

    Summary

    Published
    23 Feb 2024