Open Source Vulnerabilities

htslib

Heap-buffer-overflow in bam_aux_get

qpdf

Heap-use-after-free in QPDF::read_xref

github.com/cloudflare/circl

Timing side channel in github.com/cloudflare/circl

chromium, chromium

Security update for chromium

yasm, yasm, yasm

yasm

CVE-2023-51258 affecting package yasm for versions less than 1.3.0-16

yasm

CVE-2023-51258 affecting package yasm for versions less than 1.3.0-16

yasm, yasm, yasm, yasm, yasm, yasm, yasm

Stored Cross-site Scripting Vulnerability via Malicious File Names in GroupOffice

Unsecured endpoints in the jupyter-lsp server extension

Improper handling of request URLs in Nextcloud Guests app allows guest users to bypass app allowlist

All users can reset the allowed apps list for Nextcloud Guest App users

Permissions bypass in Nextcloud with the files zip app

OAuth2 authorization codes are valid indefinetly in Nextcloud server

Open redirect in user_saml via RelayState parameter in Nextcloud User Saml

vyper

Cross-site Scripting when sending HTML as a comment in the Nextcloud Deck app

Nextcloud global site selector authentication bypass

concat built-in can corrupt memory in vyper

xerces-c, xerces-c, xerces-c, xerces-c, xerces-c

xerces-c vulnerabilities

filezilla, filezilla

filezilla vulnerability