Open Source Vulnerabilities

flac, flac, flac, flac, flac

flac security update

poppler, poppler

poppler security update

clamav

clamav security update

clamav

clamav security update

clamav

clamav security update

clamav

clamav security update

krb5

krb5 security update

krb5

krb5 security update

microcode_ctl

microcode_ctl security update

microcode_ctl

microcode_ctl security update

indent, indent, indent, indent, indent

indent security update

nodejs, nodejs, nodejs, nodejs, nodejs

nodejs security update

terraform

Security update for terraform

accountsservice

CVE-2023-3297 affecting package accountsservice for versions less than 23.13.9-1

accountsservice

CVE-2023-3297 affecting package accountsservice 0.6.55-4

github.com/bnb-chain/tss-lib

tss-lib leaks secret keys in response to incorrectly constructed Paillier moduli

Velocity execution without script rights in Xwiki platform

Improper Neutralization of Script in Attributes in @dcl/single-sign-on-client

catdoc, catdoc, catdoc

rust-vm-memory, rust-vm-memory, rust-vm-memory

snapd, snapd, snapd

catdoc, catdoc, catdoc, catdoc, catdoc, catdoc, catdoc

rust-vm-memory

io.dataease:dataease-plugin-common

DataEase vulnerable to SQL injection

langchain, numexpr

Langchain vulnerable to arbitrary code execution via the evaluate function in the numexpr library

Default functions in VolatileMemory trait lack bounds checks in vm-memory

Infosoftbd Clcknshop GET Parameter all sql injection

Infosoftbd Clcknshop all cross site scripting

gpac

gpac

gpac

timg, timg, timg

libtommath, libtommath, libtommath

libtommath

CVE-2023-36328 affecting package libtommath for versions less than 1.1.0-5

libtommath

CVE-2023-36328 affecting package libtommath for versions less than 1.1.0-5