Open Source Vulnerabilities

Imageflow.AllPlatforms, Imageflow.NativeRuntime.win-x86_64, Imageflow.NativeRuntime.osx-x86_64, Imageflow.NativeRuntime.win-x86, Imageflow.NativeRuntime.ubuntu-x86_64, Imageflow.NativeRuntime.ubuntu-x86_64-haswell, Imageflow.NativeTool.win-x86_64, Imageflow.NativeTool.osx-x86_64, Imageflow.NativeTool.win-x86, Imageflow.NativeTool.ubuntu-x86_64, Imageflow.NativeTool.ubuntu-x86_64-haswell, Imageflow.NativeRuntime.ubuntu_18_04-x86_64-haswell, Imageflow.NativeRuntime.ubuntu_18_04-x86_64, Imageflow.NativeRuntime.osx_10_11-x86_64, Imageflow.NativeRuntime.ubuntu_16_04-x86_64, Imageflow.NativeTool.ubuntu_18_04-x86_64-haswell, Imageflow.NativeTool.ubuntu_16_04-x86_64, Imageflow.NativeTool.ubuntu_18_04-x86_64, Imageflow.NativeTool.osx_10_11-x86_64, Imageflow.Server, ImageResizer.Plugins.Imageflow

Imageflow affected by libwebp zero-day and should not be used with malicious source images.

SSH key password bypassed in warpgate

Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server

Sandbox escape for instances that have enabled transformation functions in matrix-hookshot

kernel-livepatch-SLE15-SP2_Update_34

Security update for the Linux Kernel (Live Patch 34 for SLE 15 SP2)

SSH public key login without private key challenge if mfa is enabled in jumpserver

Remote code execution on the host system via MongoDB shell in jumpserver

@napi-rs/image

@napi-rs/image affected by libwebp CVE

get-func-name

Chaijs/get-func-name vulnerable to ReDoS

github.com/argoproj/argo-cd, github.com/argoproj/argo-cd/v2

Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server

kernel-livepatch-SLE15-SP2_Update_33

Security update for the Linux Kernel (Live Patch 33 for SLE 15 SP2)

Non-MFA account takeover via brute-force attack on weak password reset code in jumpserver

Non-MFA account takeover via using only SSH public key to login in jumpserver

Privilege escalation from having CREATE access on a keyspace in Scylladb

xrdp, xrdp, xrdp

xrdp, xrdp, xrdp, xrdp, xrdp, xrdp

nghttp2, nghttp2, nghttp2

Security update for nghttp2

Unchecked access to font glyph info in xrdp

go1.19-openssl, go1.19-openssl, go1.19-openssl, go1.19-openssl

Security update for go1.19-openssl

go1.20-openssl, go1.20-openssl, go1.20-openssl, go1.20-openssl

Security update for go1.20-openssl

quagga, quagga, quagga, quagga

Security update for quagga

libssh2, libssh2-devel, libssh2-docs

libssh2: Fix of CVE-2020-22218

kernel-livepatch-SLE15-SP1_Update_40

Security update for the Linux Kernel (Live Patch 40 for SLE 15 SP1)