Open Source Vulnerabilities

bind

CVE-2023-3341 affecting package bind for versions less than 9.16.44-1

bind

bind, bind

io.quarkus:quarkus-vertx-http, io.quarkus:quarkus-vertx-http, io.quarkus:quarkus-vertx-http, io.quarkus:quarkus-undertow, io.quarkus:quarkus-undertow, io.quarkus:quarkus-undertow, io.quarkus:quarkus-csrf-reactive, io.quarkus:quarkus-csrf-reactive, io.quarkus:quarkus-csrf-reactive, io.quarkus:quarkus-keycloak-authorization, io.quarkus:quarkus-keycloak-authorization, io.quarkus:quarkus-keycloak-authorization

Quarkus HTTP vulnerable to incorrect evaluation of permissions

org.springframework.graphql:spring-graphql, org.springframework.graphql:spring-graphql

Spring for GraphQL may be exposed to GraphQL context with values from a different session

cups, libppd, cups, libppd, cups, libppd, cups, libppd

indent, indent

indent vulnerability

kernel-default, kernel-default, kgraft-patch-SLE12-SP5_Update_48, kernel-docs, kernel-obs-build, kernel-default, kernel-source, kernel-syms, kernel-default, kernel-source, kernel-syms, kernel-default

Security update for the Linux Kernel

mutt, mutt

Security update for mutt

Cross-site Scripting (XSS) - Reflected in hestiacp/hestiacp

Quarkus: http security policy bypass

go1.21, go1.21, go1.21, go1.21

Security update for go1.21

go1.20, go1.20, go1.20, go1.20

Security update for go1.20

Exposure of data and identity to wrong session in Spring for GraphQL

libxml2, libxml2-python, libxml2, libxml2-python, libxml2, libxml2-python, libxml2-python, libxml2, libxml2-python

Security update for libxml2

libxml2, python-libxml2-python, libxml2, python-libxml2-python, libxml2, python-libxml2-python, libxml2, python-libxml2-python, libxml2, python-libxml2-python, libxml2, python-libxml2-python, libxml2, python-libxml2-python, libxml2, python-libxml2-python, libxml2, python-libxml2-python, libxml2, python-libxml2-python, libxml2, python-libxml2-python, libxml2, python-libxml2-python, libxml2, libxml2, python-libxml2-python, libxml2, python-libxml2-python, libxml2, python-libxml2-python, python-libxml2-python, python-libxml2-python

Security update for libxml2

atk, xmlsec1, atk, atk, xmlsec1, atk, xmlsec1

Feature update for LibreOffice

binutils, binutils, binutils

Security update for binutils

github.com/schollz/croc/v9

Croc sender may send dangerous new files to receiver

github.com/schollz/croc/v9

Cros secrets may be disclosed to untrusted relay

github.com/schollz/croc

Sender can cause a receiver to overwrite files during ZIP extraction in Croc

github.com/schollz/croc/v9

Croc requires senders to provide local IP addresses in cleartext

github.com/schollz/croc/v9

Croc may expose secret to local users

github.com/schollz/croc/v9

Croc sender may place ANSI or CSI escape sequences in filename to attach receiver's terminal device

graphql

graphql Uncontrolled Resource Consumption vulnerability

linux, linux, linux

kernel

CVE-2023-2163 affecting package kernel for versions less than 5.15.133.1-1

CVE-2023-2163 does not affect BellSoft software

pillow

node-graphql, node-graphql, node-graphql

node-graphql, node-graphql, node-graphql, node-graphql

imagecodecs

dolibarr/dolibarr

Cross Site Scripting vulnerability in Dolibarr ERP CRM

dolibarr/dolibarr

Dolibarr allows a remote privileged attacker to execute arbitrary code via a crafted command/script

dolibarr/dolibarr

File Upload vulnerability in Dolibarr ERP CRM