Open Source Vulnerabilities

linux-azure, linux-gcp, linux-hwe, linux-oracle, linux, linux-aws, linux-azure-4.15, linux-gcp-4.15, linux-kvm, linux-oracle

linux, linux-aws, linux-azure, linux-azure-4.15, linux-gcp, linux-gcp-4.15, linux-hwe, linux-kvm, linux-oracle vulnerabilities

linux-lts-xenial, linux, linux-aws, linux-kvm

linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities

github.com/ydb-platform/ydb-go-sdk/v3

ydb-go-sdk token in custom credentials object can leak through logs

github.com/artifacthub/hub

Artifact Hub arbitrary file read vulnerability

github.com/artifacthub/hub

Artifact Hub allows unsafe rego built-in

github.com/artifacthub/hub

Artifact Hub has Incorrect Docker Hub registry check

mutt

mutt vulnerabilities

tinymce, TinyMCE, tinymce/tinymce, tinymce, TinyMCE, tinymce/tinymce

TinyMCE XSS vulnerability in notificationManager.open API

tinymce, TinyMCE, tinymce/tinymce, tinymce, TinyMCE, tinymce/tinymce

TinyMCE mXSS vulnerability in undo/redo, getContent API, resetContent API, and Autosave plugin

archivebox

Viewing wget extractor output while logged in as an admin allows archived JS to execute in the admins context

github.com/nats-io/nats-server/v2, github.com/nats-io/nats-server/v2

NATS.io: Adding accounts for just the system account adds auth bypass

dotnet6, dotnet7

dotnet6, dotnet7 vulnerabilities

Bunkum

Bunkum tokens cached in the AuthenticationService are susceptible to a use-after-free

chromium-browser-stable

Updated chromium-browser-stable packages fix bugs and vulnerabilities

ghostscript, ghostscript

Updated ghostscript packages fix security vulnerability

apollo-router

Apollo Router vulnerable to Improper Check or Handling of Exceptional Conditions

dotnet8

dotnet8 vulnerability

wagtail, wagtail, wagtail

Wagtail vulnerable to disclosure of user names via admin bulk action views

react-devtools-core

React Developer Tools extension Improper Authorization vulnerability

linux-raspi

linux-raspi vulnerabilities

torbot

TorBot vulnerable to Inefficient Regular Expression Complexity in validate_link

org.apache.inlong:manager-common, org.apache.inlong:manager-pojo

Apache InLong Deserialization of Untrusted Data Vulnerability

suse-module-tools, suse-module-tools

Security update for suse-module-tools

suse-module-tools, suse-module-tools, suse-module-tools

Security update for suse-module-tools

tracing

Potential stack use-after-free in `Instrumented::into_inner`

glib2.0, glib2.0, glib2.0

glib2.0 vulnerabilities

nodejs18, nodejs18

Security update for nodejs18