Open Source Vulnerabilities

budgie-extras, budgie-extras, budgie-extras, budgie-extras, budgie-extras, budgie-extras

budgie-extras, budgie-extras, budgie-extras, budgie-extras, budgie-extras, budgie-extras

budgie-extras, budgie-extras, budgie-extras, budgie-extras, budgie-extras, budgie-extras

budgie-extras, budgie-extras, budgie-extras, budgie-extras, budgie-extras, budgie-extras

budgie-extras, budgie-extras, budgie-extras, budgie-extras, budgie-extras, budgie-extras

budgie-extras, budgie-extras, budgie-extras, budgie-extras, budgie-extras, budgie-extras

avahi, avahi-autoipd, avahi-compat-howl, avahi-compat-howl-devel, avahi-compat-libdns_sd, avahi-compat-libdns_sd-devel, avahi-devel, avahi-glib, avahi-glib-devel, avahi-gobject, avahi-gobject-devel, avahi-libs, avahi-tools, avahi-ui, avahi-ui-devel, avahi-ui-gtk3, python3-avahi

Moderate: avahi security update

gstreamer1-plugins-bad-free, gstreamer1-plugins-bad-free-devel

Important: gstreamer1-plugins-bad-free security update

haproxy

haproxy - security update

bluez

bluez - security update

@cubejs-backend/api-gateway

Cube API denial of service attack

t3s/content-consent, t3s/content-consent

Insecure Direct Object Reference in extension "Content Consent" (content_consent)

in2code/femanager

Broken Access Control in extension "femanager"

directmailteam/direct-mail, directmailteam/direct-mail, directmailteam/direct-mail

Configuration Injection in extension "Direct Mail" (direct_mail)

dompdf/dompdf

Denial of service caused by infinite recursion when parsing SVG images

ckan, ckan

Out of memory error when submitting the dataset form with a specially-crafted field

Denial of service attack on the cube-api endpoint

Scrypted reflected Cross-site Scripting vulnerability

Scrypted reflected Cross-site Scripting vulnerability

github.com/prometheus/prometheus

Withdrawn Advisory: Prometheus XSS Vulnerability

jq, jq

jq, jq, jq, jq

php-dompdf

jq, jq