Open Source Vulnerabilities

Remote code execution in XXL-RPC

Improper Check or Handling of Exceptional Conditions in apollo-router

Tokens cached in the AuthenticationService are susceptible to reuse in Bunkum

redis, redis, redis

redis, redis, redis, redis, redis

redis

CVE-2023-45145 affecting package redis for versions less than 6.2.14-1

redis, redis, redis, redis, redis

Insufficient Verification of Data Authenticity in Arduino Create Agent

Path traversal in Arduino Create Agent

Path traversal in Arduino Create Agent

Path traversal in Arduino Create Agent

Inefficient Regular Expression Complexity in TorBot

Redis Unix-domain socket may have be exposed with the wrong permissions for a short time window.

openssl, openssl

openssl vulnerabilities

cups

Security update for cups

libeconf

Security update for libeconf

supportutils

Security update for supportutils

runc

Security update for runc

containerd

Security update for containerd

rustix, rustix, rustix, rustix

rustix's `rustix::fs::Dir` iterator with the `linux_raw` backend can cause memory explosion

deobfuscator

Synchrony deobfuscator prototype pollution vulnerability leading to arbitrary code execution

github.com/openfga/openfga

OpenFGA DoS vulnerability

github.com/arduino/arduino-create-agent

Arduino Create Agent path traversal - arbitrary file deletion vulnerability

github.com/arduino/arduino-create-agent

Arduino Create Agent path traversal - local privilege escalation vulnerability

github.com/arduino/arduino-create-agent

Arduino Create Agent path traversal - arbitrary file deletion vulnerability

gifsicle, gifsicle, gifsicle

gifsicle, gifsicle, gifsicle, gifsicle, gifsicle, gifsicle, gifsicle, gifsicle

github.com/arduino/arduino-create-agent

Arduino Create Agent Insufficient Verification of Data Authenticity vulnerability

roundcube, roundcube, roundcube

roundcube, roundcube, roundcube

Stored XSS vulnerability in Roundcube

slurm

Security update for slurm

vips, vips, vips

vips vulnerabilities

CVE-2023-0687 does not affect BellSoft software

CVE-2023-29939 does not affect BellSoft software