Open Source Vulnerabilities

netty, netty, netty, netty

netty vulnerabilities

eDEX-UI cross-site websocket hijacking vulnerability enables remote command execution

WWBN AVideo vulnerable to OS Command Injection

glib2, glib2, glib2, glib2

Security update for glib2

concrete5/concrete5

Stored cross site scripting on API integration

concrete5/concrete5

Missing rate limit for password resets

concrete5/concrete5

Stored cross site scripting in RSS displayer

concrete5/concrete5

Concrete CMS (previously concrete5) is vulnerable to stored XSS in uploaded file and folder names

concrete5/concrete5

Reflected cross site scripting

concrete5/concrete5

Concrete CMS (previously concrete5) is vulnerable to possible auth bypass in the jobs section

concrete5/concrete5

Concrete CMS missing secure cookie parameters

concrete5/concrete5

Stored cross site scripting via container name

concrete5/concrete5

Stored cross site scripting on saved presets

concrete5/concrete5

Stored cross site scripting on tags

Gradle Build Action data written to GitHub Actions Cache may expose secrets

zstd, zstd, zstd

Security update for zstd

shadow, shadow, shadow, shadow, shadow, shadow, shadow, shadow, shadow, shadow

Security update for shadow