Open Source Vulnerabilities

cryptography

pyca/cryptography's wheels include vulnerable OpenSSL

keylime

Keylime's registrar vulnerable to Denial-of-service attack via a single open connection

mindsdb

MindsDB can be made to not verify SSL certificates

com.tencyle.fixes:org.codehaus.jettison--jettison

Jettison parser crash by stackoverflow

@ensdomains/ens-contracts

.eth registrar controller can shorten the duration of registered names

kernel-livepatch-SLE15-SP5_Update_0

Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP5)

kernel-livepatch-SLE15-SP4_Update_13

Security update for the Linux Kernel (Live Patch 13 for SLE 15 SP4)

ghostscript, ghostscript, ghostscript

ghostscript, ghostscript, ghostscript

ghostscript, ghostscript, ghostscript, ghostscript

ghostscript

ghostscript

pnpm, @pnpm/exe, @pnpm/linux-arm64, @pnpm/linux-x64, @pnpm/linuxstatic-arm64, @pnpm/macos-arm64, @pnpm/macos-x64, @pnpm/win-x64, @pnpm/cafs, pnpm, @pnpm/exe, @pnpm/linux-arm64, @pnpm/linux-x64, @pnpm/linuxstatic-arm64, @pnpm/macos-arm64, @pnpm/macos-x64, @pnpm/win-x64

pnpm incorrectly parses tar archives relative to specification

@simonsmith/cypress-image-snapshot

@simonsmith/cypress-image-snapshothas fix for insecure snapshot file names

firefox-esr, firefox-esr, thunderbird, thunderbird

firefox-esr, firefox-esr, firefox-esr, thunderbird, thunderbird, thunderbird

firefox-esr, firefox-esr, firefox-esr, thunderbird, thunderbird, thunderbird

mozjs52, mozjs38, thunderbird, mozjs68, mozjs52, mozjs102, mozjs78, mozjs91, thunderbird, mozjs102

billz/raspap-webgui

RaspAP Command Injection vulnerability

billz/raspap-webgui

RaspAP Command Injection vulnerability

firefox-esr, firefox-esr, thunderbird, thunderbird