Open Source Vulnerabilities

github.com/libp2p/go-libp2p

Large RSA keys can cause high resource usage in github.com/libp2p/go-libp2p

Instrumentation for AWS SDK v2 captures email content when using Amazon Simple Email Service (SES) v1 API, exposing that content to the telemetry backend

sentry

Privilege escalation via ApiTokensEndpoint

rust1.71, rust1.71, rust1.71, rust1.71

Security update for rust1.71

import-in-the-middle

import-in-the-middle has unsanitized user controlled input in module generation

golang

CVE-2023-39533 affecting package golang 1.27.1-1

golang

CVE-2023-39533 affecting package golang for versions less than 1.19.12-1

msft-golang

CVE-2023-39533 affecting package msft-golang for versions less than 1.19.12-1

golang

CVE-2023-39533 affecting package golang for versions less than 1.21.6-1

golang

CVE-2023-39533 affecting package golang for versions less than 1.21.6-1

golang

CVE-2023-39533 affecting package golang for versions less than 1.19.12-1

golang

CVE-2023-39533 affecting package golang 1.25.7-1

libp2p nodes vulnerable to attack using large RSA keys

social-media-skeleton stored Cross-site Scripting vulnerability

com.fasterxml.jackson.dataformat:jackson-dataformat-toml

Denial of service in jackson-dataformat-toml

wger

wger Workout Manager Cross-site Scripting vulnerability

wger

wger Workout Manager Cross-Site Request Forgery vulnerability