Open Source Vulnerabilities

Improper authentication in the SOCKS5 inbound in sing-box

Missing upper bound check on chunk length in snappy-java

Cross-site Scripting (XSS) in pimcore admin-ui-classic-bundle translations

yt-dlp command injection when using `%q` in `--exec` on Windows

searchor

Searchor CLI's Search vulnerable to Arbitrary Code using Eval

org.xerial.snappy:snappy-java

snappy-java's missing upper bound check on chunk length can lead to Denial of Service (DoS) impact

gawk, gawk, gawk

gawk

CVE-2023-4156 affecting package gawk for versions less than 5.1.1-1

CVE-2023-4156 does not affect BellSoft software

pimcore/admin-ui-classic-bundle

pimcore/admin-ui-classic-bundle Cross-site Scripting vulnerability in Translations

yt-dlp

yt-dlp on Windows vulnerable to `--exec` command injection when using `%q`

golang.org/x/net

x/net/html Vulnerable to DoS During HTML Parsing

linux, linux, linux

glibc, glibc

glibc

CVE-2023-5156 affecting package glibc for versions less than 2.38-6

glibc

CVE-2023-5156 affecting package glibc for versions less than 2.35-6

mediawiki, mediawiki, mediawiki