Open Source Vulnerabilities

Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go

Unsafe behavior in setuid/setgid binaries in runtime

Code injection via go command with cgo in cmd/go

Snowflake NodeJS Driver vulnerable to Command Injection

toolchain

Code injection via go command with cgo in cmd/go

stdlib

Unsafe behavior in setuid/setgid binaries in runtime

toolchain

Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go

toolchain

Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go

Snowflake Golang Driver vulnerable to Command Injection

openssl

Updated openssl packages fix security vulnerability

libreoffice

Updated libreoffice packages fix security vulnerability

python-flask

Updated python-flask packages fix security vulnerability

Thruk has Path Traversal Vulnerability in panorama.pm

github.com/rs/cors

Insecure wildcard CORS policy in github.com/rs/cors

@openzeppelin/contracts, @openzeppelin/contracts-upgradeable

OpenZeppelin Contracts's governor proposal creation may be blocked by frontrunning

com.ruoyi:ruoyi

RuoYi Uncontrolled Resource Consumption vulnerability

linux-aws, linux-lts-xenial, linux, linux-aws, linux-kvm

linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities

espeak-ng

Stack-buffer-overflow in SetPitchGradient

python36-core, python36, python36-core, python36, python36-core

Security update for python36

mozjs102

mozjs102 vulnerability

y_project RuoYi filterKeyword resource consumption

netatalk, netatalk, netatalk, netatalk, netatalk

netatalk vulnerabilities

openssl1

Security update for openssl1

openssl-3, openssl-3

Security update for openssl-3

openssl

Security update for openssl

kernel-livepatch-SLE15-SP4_Update_0

Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP4)

libwebp, libwebp, libwebp, libwebp, libwebp, libwebp, libwebp

Security update for libwebp

opensc, opensc

Security update for opensc

supportutils, supportutils

Security update for supportutils

python310, python310-core, python310, python310-core, python310-documentation, python310, python310-core, python310-documentation

Security update for python310

python-sqlparse, python-sqlparse

Security update for python-sqlparse

dbus, dbus, dbus

dbus

CVE-2023-34969 affecting package dbus for versions less than 1.15.6-1

dbus, dbus, dbus, dbus

Abandoned Cart Lite for WooCommerce <= 5.15.1 - Authentication Bypass

gradio

,