Open Source Vulnerabilities

cdo-local-uuid

jinja2, jinja2, jinja2, jinja2, jinja2, jinja2

case-utils

firefox

firefox regressions

Jinja vulnerable to Cross-Site Scripting (XSS)

cdo-local-uuid vulnerable to insertion of artifact derived from developer's Present Working Directory into demonstration code

gitpython

python-git, python-git, python-git, python-git, python-git, python-git, python-git, python-git

Untrusted search path under some conditions on Windows allows arbitrary code execution

Pimcore Customer Data Framework Improper Access Control allows unprivileged user to access GDPR extracts

Pimcore Customer Data Framework Improper Access Control allows unprivileged user to access customers duplicates list

Pimcore Ecommerce Framework Bundle Improper Access Control allows unprivileged user to access back-office orders list

icu

Stack-buffer-overflow in _canonicalize

linux-aws

linux-aws vulnerabilities

chromium, chromium, chromium

golang-github-lucas-clemente-quic-go, golang-github-lucas-clemente-quic-go, golang-github-lucas-clemente-quic-go

webkit2gtk, webkit2gtk, webkit2gtk, wpewebkit, wpewebkit, wpewebkit

coredns

CVE-2023-49295 affecting package coredns for versions less than 1.11.1-2

coredns

CVE-2023-49295 affecting package coredns for versions less than 1.11.1-5