Open Source Vulnerabilities

Incorrect User Management in GitLab

Incorrect Authorization in GitLab

Improper Validation of Specified Type of Input in GitLab

Incorrect User Management in GitLab

Improper Validation of Specified Type of Input in GitLab

Incorrect Authorization in GitLab

Incorrect Authorization in GitLab

NodeBB Pre-Authentication Denial-of-Service

kernel-livepatch-SLE15-SP2_Update_39

Security update for the Linux Kernel (Live Patch 39 for SLE 15 SP2)

kernel-livepatch-SLE15-SP2_Update_37

Security update for the Linux Kernel (Live Patch 37 for SLE 15 SP2)

github.com/hashicorp/vault

Hashicorp Vault Incorrect Permission Assignment for Critical Resource vulnerability

libvpx, libvpx

libvpx - security update

firefox-esr

firefox-esr - security update

chromium, chromium

chromium - security update

python-reportlab

python-reportlab - security update

python-git

python-git - security update

vim

vim - security update

firefox-esr

firefox-esr - security update

libvpx, libvpx, libvpx, mozjs52, mozjs38, firefox, libvpx, thunderbird, mozjs68, mozjs52, libvpx, mozjs102, mozjs78, mozjs91, thunderbird, mozjs102, thunderbird

Vault's Google Cloud Secrets Engine Removed Existing IAM Conditions When Creating / Updating Rolesets

Vault Enterprise's Sentinel RGP Policies Allowed For Cross-Namespace Denial of Service

TorchServe Server-Side Request Forgery

Arbitrary file read vulnerability in Shoko Server

zod

Zod denial of service vulnerability

drupal/core, drupal/core, drupal/core

Cache poisoning in drupal/core

github.com/openfga/openfga

OpenFGA Vulnerable to DoS from circular relationship definitions

Zod 3.22.2 - Regular expression Denial of Service

drupal7, drupal7

electron, electron, electron, electron, electron

Electron affected by libvpx's heap buffer overflow in vp8 encoding

Drupal core - Critical - Cache poisoning - SA-CORE-2023-006