Open Source Vulnerabilities

libcue, libcue

libcue - security update

curl, curl

curl - security update

linux-aws, linux-azure, linux-lts-xenial, linux, linux-aws, linux-aws-hwe, linux-azure, linux-gcp, linux-hwe, linux-hwe-edge, linux-kvm, linux-oracle, linux-fips, linux, linux-aws, linux-aws-5.0, linux-aws-5.3, linux-aws-5.4, linux-azure, linux-azure-4.15, linux-azure-5.3, linux-azure-5.4, linux-azure-edge, linux-gcp, linux-gcp-4.15, linux-gcp-5.3, linux-gcp-5.4, linux-gke-4.15, linux-gke-5.4, linux-gkeop-5.4, linux-hwe, linux-hwe-5.4, linux-ibm-5.4, linux-kvm, linux-oem, linux-oracle, linux-oracle-5.0, linux-oracle-5.3, linux-oracle-5.4, linux-raspi-5.4, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux, linux-aws, linux-aws-5.15, linux-azure, linux-azure-5.15, linux-bluefield, linux-gcp, linux-gcp-5.15, linux-gkeop, linux-gkeop-5.15, linux-hwe-5.15, linux-ibm, linux-ibm-5.15, linux-intel-iotg-5.15, linux-iot, linux-kvm, linux-lowlatency-hwe-5.15, linux-nvidia-tegra-5.15, linux-oracle, linux-oracle-5.15, linux-raspi, linux-riscv-5.15, linux-xilinx-zynqmp, linux-aws-5.11, linux-aws-5.13, linux-aws-5.8, linux-azure-5.11, linux-azure-5.13, linux-azure-5.8, linux-azure-fde, linux-gcp-5.11, linux-gcp-5.13, linux-gcp-5.8, linux-gke, linux-gke-5.15, linux-hwe-5.11, linux-hwe-5.13, linux-hwe-5.8, linux-intel-5.13, linux-oem-5.10, linux-oem-5.13, linux-oem-5.14, linux-oem-5.6, linux-oracle-5.11, linux-oracle-5.13, linux-oracle-5.8, linux-raspi2, linux-riscv, linux-riscv-5.11, linux-riscv-5.8, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux-fips, linux, linux-allwinner-5.19, linux-aws, linux-aws-5.19, linux-aws-6.2, linux-aws-6.5, linux-azure, linux-azure-5.19, linux-azure-6.2, linux-azure-6.5, linux-azure-fde, linux-azure-fde-5.19, linux-azure-fde-6.2, linux-gcp, linux-gcp-5.19, linux-gcp-6.2, linux-gcp-6.5, linux-gke, linux-gkeop, linux-hwe-5.19, linux-hwe-6.2, linux-hwe-6.5, linux-ibm, linux-intel-iotg, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.19, linux-lowlatency-hwe-6.2, linux-lowlatency-hwe-6.5, linux-nvidia, linux-nvidia-6.2, linux-nvidia-6.5, linux-nvidia-tegra, linux-nvidia-tegra-igx, linux-oem-5.17, linux-oem-6.0, linux-oem-6.1, linux-oem-6.5, linux-oracle, linux-oracle-6.5, linux-raspi, linux-realtime, linux-riscv, linux-riscv-5.19, linux-starfive-5.19, linux-starfive-6.2, linux-xilinx-zynqmp, linux-bluefield, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux-aws-fips, linux-fips, linux-gcp-fips, linux-intel-iot-realtime, linux-realtime, linux-raspi-realtime

curl

curl - security update

python3.7

python3.7 - security update

Microsoft.Native.Quic.MsQuic.OpenSSL, Microsoft.Native.Quic.MsQuic.Schannel

MsQuic Remote Denial of Service Vulnerability

io.netty:netty-codec-http2

io.netty:netty-codec-http2 vulnerable to HTTP/2 Rapid Reset Attack

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat-coyote, org.apache.tomcat:tomcat-coyote, org.apache.tomcat:tomcat-coyote, org.apache.tomcat:tomcat-coyote

Apache Tomcat Improper Input Validation vulnerability

mtproto_proxy

MTProto proxy remote code execution vulnerability

github.com/zitadel/zitadel

ZITADEL's password reset does not respect the "Ignoring unknown usernames" setting

@graphql-mesh/runtime

Cache variables with the operations when transforms exist on the root level even if variables change in the further requests with the same operation

uptime-kuma

Uptime Kuma has Persistentent User Sessions

github.com/goharbor/harbor, github.com/goharbor/harbor, github.com/goharbor/harbor

Harbor timing attack risk

github.com/apple/swift-nio-http2, golang.org/x/net, org.apache.tomcat:tomcat-coyote, org.apache.tomcat:tomcat-coyote, org.apache.tomcat:tomcat-coyote, org.apache.tomcat:tomcat-coyote, org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat.embed:tomcat-embed-core, org.eclipse.jetty.http2:http2-common, org.eclipse.jetty.http2:http2-common, org.eclipse.jetty.http2:http2-common, org.eclipse.jetty.http2:http2-server, org.eclipse.jetty.http2:http2-server, org.eclipse.jetty.http2:http2-server, org.eclipse.jetty.http2:jetty-http2-common, org.eclipse.jetty.http2:jetty-http2-server, com.typesafe.akka:akka-http-core, com.typesafe.akka:akka-http-core_2.13, com.typesafe.akka:akka-http-core_2.12, com.typesafe.akka:akka-http-core_2.11

HTTP/2 Stream Cancellation Attack

matrix-synapse

matrix-synapse vulnerable to denial of service due to malicious server ACL events

Microsoft.Native.Quic.MsQuic.Schannel, Microsoft.Native.Quic.MsQuic.OpenSSL

Remote Denial of Service Vulnerability in Microsoft.Native.Quic.MsQuic.Schannel

octoprint

OctoPrint vulnerable to Improper Neutralization of Special Elements Used in a Template Engine

org.eclipse.jetty.http2:http2-hpack, org.eclipse.jetty.http2:http2-hpack, org.eclipse.jetty.http3:http3-qpack, org.eclipse.jetty.http3:http3-qpack, org.eclipse.jetty.http2:http2-hpack

HTTP/2 HPACK integer overflow and buffer allocation

oro/commerce, oro/commerce, oro/commerce, oro/commerce

OroCommerce Cross-site Scripting vulnerability in add note dialog of Shopping List line item

binutils, binutils-devel

binutils: Fix of CVE-2020-19726

binutils, binutils-devel

binutils: Fix of CVE-2020-19726

libwebp, libwebp-devel, libwebp-java, libwebp-tools

libwebp: Fix of 3 CVEs

libwebp, libwebp-devel, libwebp-java, libwebp-tools

libwebp: Fix of 3 CVEs

tomcat10, tomcat10, tomcat10, tomcat9, tomcat9, tomcat9

tomcat6, tomcat7, tomcat8, tomcat7, tomcat8, tomcat9, tomcat9, tomcat9, tomcat9, tomcat9

Apache Tomcat: Trailer header parsing too lenient

org.apache.tomcat:tomcat-coyote, org.apache.tomcat:tomcat-coyote

Apache Tomcat Incomplete Cleanup vulnerability

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat-catalina, org.apache.tomcat:tomcat-catalina, org.apache.tomcat:tomcat-catalina, org.apache.tomcat:tomcat-catalina, org.apache.tomcat:tomcat-util, org.apache.tomcat:tomcat-util, org.apache.tomcat:tomcat-util, org.apache.tomcat:tomcat-util

Apache Tomcat Incomplete Cleanup vulnerability

Microsoft.CommonDataModel.ObjectModel, com.microsoft.commondatamodel:objectmodel, commondatamodel-objectmodel

Microsoft Common Data Model SDK Denial of Service Vulnerability

Azure.Identity

Azure Identity SDK Remote Code Execution Vulnerability

com.epam.reportportal:service-api

Denial of service vulnerability on creating a Launch with too many recursively nested elements in reportportal

github.com/nghttp2/nghttp2

github.com/nghttp2/nghttp2 has HTTP/2 Rapid Reset

dotnet6, dotnet7

dotnet6, dotnet7 vulnerability

matrix-synapse

tomcat10, tomcat10, tomcat10, tomcat9, tomcat9, tomcat9