Open Source Vulnerabilities

golang

CVE-2023-39318 affecting package golang 1.27.1-1

golang

CVE-2023-39318 affecting package golang for versions less than 1.20.10-1

golang

CVE-2023-39319 affecting package golang for versions less than 1.20.10-1

msft-golang

CVE-2023-39319 affecting package msft-golang for versions less than 1.20.10-1

msft-golang

CVE-2023-39318 affecting package msft-golang for versions less than 1.20.10-1

golang

CVE-2023-39319 affecting package golang for versions less than 1.20.10-1

golang

CVE-2023-39319 affecting package golang for versions less than 1.21.6-1

golang

CVE-2023-39318 affecting package golang for versions less than 1.21.6-1

golang

CVE-2023-39319 affecting package golang for versions less than 1.21.6-1

golang

CVE-2023-39318 affecting package golang for versions less than 1.21.6-1

golang

CVE-2023-39318 affecting package golang for versions less than 1.20.10-1

golang

CVE-2023-39319 affecting package golang 1.25.7-1

golang

CVE-2023-39318 affecting package golang 1.25.7-1

go, go

go, go

golang-1.10, golang-1.18, golang-1.10, golang-1.6, golang-1.13, golang-1.10, golang-1.13, golang-1.16, golang-1.18, golang-1.8, golang-1.9, golang-1.18, golang-1.20, golang-1.13, golang-1.14, golang-1.16, golang-1.17, golang-1.18, golang-1.20, golang-1.13

golang-1.21, golang-1.21, golang-1.21

golang-1.21, golang-1.21, golang-1.21

golang-1.21, golang-1.21, golang-1.21

golang-1.10, golang-1.18, golang-1.10, golang-1.6, golang-1.13, golang-1.10, golang-1.13, golang-1.16, golang-1.18, golang-1.8, golang-1.9, golang-1.18, golang-1.20, golang-1.13, golang-1.14, golang-1.16, golang-1.17, golang-1.18, golang-1.20, golang-1.13

go, go

go, go

go, go

Terraform Allows Arbitrary File Write During Init Operation

Memory exhaustion in QUIC connection handling in crypto/tls

Panic when processing post-handshake message on QUIC connections in crypto/tls

Improper handling of special tags within script contexts in html/template

Arbitrary code execution via go.mod toolchain directive in cmd/go

Improper handling of HTML-like comments in script contexts in html/template

kernel-default, kernel-default, kgraft-patch-SLE12-SP5_Update_47, kernel-docs, kernel-obs-build, kernel-default, kernel-source, kernel-syms, kernel-default, kernel-source, kernel-syms, kernel-default

Security update for the Linux Kernel

hexo

Hexo `include_code` has a path traversal

libredwg

Invalid-free in bit_chain_alloc_size

hdf5

Heap-buffer-overflow in H5F__accum_free

icu73_2, icu73_2, icu73_2, icu73_2, icu73_2, icu73_2, icu73_2, icu73_2, icu73_2, icu73_2, icu73_2

Security update for icu73_2

github.com/gofiber/fiber, github.com/gofiber/fiber/v2

Fiber unauthorized access vulnerability in `ctx.IsFromLocal()`

github.com/turt2live/matrix-media-repo

matrix-media-repo: Unsafe media served inline on download endpoints

MozillaFirefox, MozillaFirefox, MozillaFirefox

Security update for MozillaFirefox

skopeo, skopeo, skopeo, skopeo, skopeo, skopeo, skopeo, skopeo, skopeo, skopeo, skopeo

Security update for skopeo

geoipupdate, geoipupdate, geoipupdate, geoipupdate, geoipupdate, geoipupdate, geoipupdate, geoipupdate, geoipupdate, geoipupdate, geoipupdate, geoipupdate, geoipupdate, geoipupdate, geoipupdate, geoipupdate, geoipupdate, geoipupdate

Security update for geoipupdate

MozillaFirefox, MozillaFirefox, MozillaFirefox

Security update for MozillaFirefox

rekor, rekor, rekor, rekor

Security update for rekor

webkit2gtk3-soup2, webkit2gtk3-soup2, webkit2gtk3, webkit2gtk3, webkit2gtk4, webkit2gtk4, webkit2gtk3, webkit2gtk3-soup2, webkit2gtk4, webkit2gtk3, webkit2gtk3-soup2, webkit2gtk4

Security update for webkit2gtk3

libssh2_org, libssh2_org, libssh2_org, libssh2_org, libssh2_org, libssh2_org, libssh2_org, libssh2_org, libssh2_org, libssh2_org, libssh2_org, libssh2_org, libssh2_org, libssh2_org, libssh2_org, libssh2_org, libssh2_org, libssh2_org, libssh2_org, libssh2_org, libssh2_org, libssh2_org

Security update for libssh2_org

org.wiremock:wiremock-standalone, org.wiremock:wiremock, com.github.tomakehurst:wiremock-jre8, com.github.tomakehurst:wiremock-jre8-standalone, wiremock

Domain restrictions bypass via DNS Rebinding in WireMock and WireMock Studio webhooks, proxy and recorder modes

knplabs/knp-snappy

Snappy PHAR deserialization vulnerability

openssl, openssl, openssl, openssl, openssl, openssl, openssl, openssl, openssl, openssl, openssl3, openssl3

openssl-fips-provider

CVE-2023-4807 affecting package openssl-fips-provider 3.1.2-2