Open Source Vulnerabilities

league/oauth2-server key exposed in exception message when passing as string and providing invalid pass phrase

Sanitize vulnerable to Cross-site Scripting via insufficient neutralization of `style` element content

SQLFluff vulnerability for users with access to config file, using `library_path` to call arbitrary python code.

Novu Open Redirect Vulnerability in Sign-In with GitHub Functionality

pdfcrack, pdfcrack, pdfcrack