Open Source Vulnerabilities

postcss

PostCSS line return parsing error

Cross-site Scripting (XSS) - DOM in thorsten/phpmyfaq

Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

Use of Hard-coded Credentials in microweber/microweber

Cross-site Scripting (XSS) - DOM in thorsten/phpmyfaq

Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

Unrestricted Upload of File with Dangerous Type in thorsten/phpmyfaq

firmware-nonfree

firmware-nonfree - security update

trafficserver

trafficserver - security update

cups

cups - security update

gerbv

gerbv - security update

jetty9

jetty9 - security update

firefox-esr

firefox-esr - security update

node-postcss, node-postcss, node-postcss

node-postcss, node-postcss, node-postcss, node-postcss, node-postcss

opencv-python-headless

opencv-python

opencv-contrib-python-headless

opencv-contrib-python

composer/composer, composer/composer, composer/composer

Composer Remote Code Execution vulnerability via web-accessible composer.phar

github.com/cometbft/cometbft, github.com/cometbft/cometbft, github.com/cometbft/cometbft

CometBFT's default for `BlockParams.MaxBytes` consensus parameter may increase block times and affect consensus participation

composer, composer, composer

composer, composer, composer, composer

Remote Code Execution via web-accessible composer.phar

org.apache.avro:avro

Apache Avro Java SDK vulnerable to Improper Input Validation