Open Source Vulnerabilities

giflib

CVE-2023-39742 affecting package giflib for versions less than 5.2.1-8

giflib

CVE-2023-39742 affecting package giflib for versions less than 5.2.1-8

giflib, giflib

giflib, giflib, giflib

harfbuzz

UNKNOWN READ in OT::glyph_variations_t::create_from_glyphs_var_data

cpython3

Use-of-uninitialized-value in _PyFunction_FromConstructor

libheif

Heap-buffer-overflow in HeifContext::interpret_heif_file

Parameter tampering in the registration resulting in blocked accounts to be created

prometheus-alertmanager, prometheus-alertmanager, prometheus-alertmanager

pypy3, pypy3, pypy3, python3.11

python3, python3, python3, python3, python3, python3, python3, python3, python3, python3

python3

CVE-2023-40217 affecting package python3 for versions less than 3.9.19-1

datasette

prometheus-alertmanager, prometheus-alertmanager, prometheus-alertmanager

python2.7, python3.5, python3.4, python2.7, python3.5, python2.7, python3.6, python3.7, python3.8, python2.7, python3.8, python3.9, python2.7, python3.10, python3.11

Silverware Games vulnerable to account enumeration via inconsistent responses

silverware-io-issue-tracker server responds in a noticeably different amount of time depending if a given email address exists or not

Datasette 1.0 alpha series leaks names of databases and tables to unauthenticated users

webpki

webpki: CPU denial of service in certificate path building

Alertmanager UI is vulnerable to stored XSS via the /api/v1/alerts endpoint

chromium, chromium

chromium - security update