Open Source Vulnerabilities

openjdk-8, openjdk-9, openjdk-lts, openjdk-17, openjdk-8, openjdk-17, openjdk-8, openjdk-lts, openjdk-13, openjdk-16, openjdk-17, openjdk-18, openjdk-8, openjdk-lts

openjdk-9, openjdk-17, openjdk-17, openjdk-13, openjdk-16, openjdk-17, openjdk-18

mysql-5.5, percona-server-5.6, percona-xtradb-cluster-5.6, mysql-8.0

Server-side Template Injection (SSTI) in grav

ethyca-fides

Fides Webserver Vulnerable to SVG Bomb File Uploads

ethyca-fides

Fides Webserver Vulnerable to Zip Bomb File Uploads

golang-github-elazarl-goproxy, golang-github-elazarl-goproxy, golang-github-elazarl-goproxy

golang-github-elazarl-goproxy, golang-github-elazarl-goproxy, golang-github-elazarl-goproxy, golang-github-elazarl-goproxy, golang-github-elazarl-goproxy, golang-github-elazarl-goproxy

org.keycloak:keycloak-core

Keycloak: Impersonation and lockout possible through incorrect handling of email trust

github.com/1Panel-dev/1Panel

1Panel command injection vulnerability in Firewall ip functionality

org.openrefine:main

OpenRefine vulnerable to zip slip in project import

org.springframework.security:spring-security-config, org.springframework.security:spring-security-config, org.springframework.security:spring-security-config

Spring Security's authorization rules can be misconfigured when using multiple servlets

Command injection in firewall ip functionality in 1Panel

Fides Webserver Vulnerable to Zip Bomb File Uploads

Fides Webserver Vulnerable to SVG Bomb File Uploads