Open Source Vulnerabilities

symfony

symfony - security update

yajl

yajl - security update

erlang

erlang - security update

thunderbird

thunderbird - security update

dotnet6, dotnet7

whatsapp-chat-exporter

Whatsapp-Chat-Exporter has Cross-Site Scripting vulnerability in HTML output of chats.

ckeditor-wordcount-plugin

ckeditor-wordcount-plugin vulnerable to Cross-site Scripting in Source Mode of Editor

pimcore/customer-management-framework-bundle

Pimcore Customer Management Framework vulnerable to Improper Authorization in Rules Controller

restrictedpython, restrictedpython, restrictedpython

RestrictedPython vulnerable to arbitrary code execution via stack frame sandbox escape

org.xwiki.platform:xwiki-platform-rest-server, com.xpn.xwiki.platform:xwiki-core-rest-server, com.xpn.xwiki.platform:xwiki-rest, org.xwiki.platform:xwiki-platform-rest-server

XWiki Platform vulnerable to cross-site request forgery (CSRF) via the REST API

org.eclipse.jetty:jetty-xml, org.eclipse.jetty:jetty-xml, org.eclipse.jetty:jetty-xml, org.eclipse.jetty:jetty-xml

Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations

sox, sox

sox

CVE-2023-34432 affecting package sox 14.4.2.0-34

sox

CVE-2023-34432 affecting package sox 14.4.2.0-34

kodbox WebConsole Plug-In webconsole.php.txt Execute os command injection

sweetalert2

sweetalert2 contains potentially undesirable behavior

org.apache.sshd:sshd-common, org.apache.sshd:sshd-sftp, org.apache.sshd:sshd-core

Apache MINA SSHD information disclosure vulnerability

nilsteampassnet/teampass

TeamPass Cross-site Scripting vulnerability

org.apache.camel:camel-jira, org.apache.camel:camel-jira, org.apache.camel:camel-jira, org.apache.camel:camel-jira

Apache Camel information exposure vulnerability