Open Source Vulnerabilities

urllib3, urllib3

`Cookie` HTTP header isn't stripped on cross-origin redirects

wallabag/wallabag

Wallabag user can disable 2FA unintentionally

pretix

pretix potential IP address spoofing vulnerability

vorbis-tools, vorbis-tools, vorbis-tools

vorbis-tools

CVE-2023-43361 affecting package vorbis-tools 1.4.2-6

vorbis-tools

CVE-2023-43361 affecting package vorbis-tools 1.4.2-6

vorbis-tools, vorbis-tools, vorbis-tools, vorbis-tools, vorbis-tools, vorbis-tools, vorbis-tools

torchserve

TorchServe Server-Side Request Forgery vulnerability

torchserve

TorchServe Pre-Auth Remote Code Execution

vim, vim, vim

vim, vim, vim, vim, vim, vim

mosquitto, mosquitto, mosquitto

mosquitto, mosquitto, mosquitto, mosquitto, mosquitto, mosquitto, mosquitto

vim

CVE-2023-5344 affecting package vim for versions less than 9.0.2010-1

vim, vim

vim, vim, vim, vim, vim

mosquitto, mosquitto

pretix

Heap-based Buffer Overflow in vim/vim

mosquitto, mosquitto, mosquitto

mosquitto, mosquitto, mosquitto, mosquitto, mosquitto, mosquitto, mosquitto

mosquitto, mosquitto

github.com/sagernet/sing

Authentication bypass in github.com/sagernet/sing

libvpx, libvpx

libvpx vulnerabilities

libtommath, libtommath, libtommath, libtommath

libtommath vulnerability

Server-Side Request Forgery in SLiMS

liblouis

Heap-buffer-overflow in back_passDoAction

libavc

Global-buffer-overflow in isvce_write_coeff4x4_cavlc

gitlab

Incorrect Authorization in GitLab