Open Source Vulnerabilities

github.com/rancher/rancher, github.com/rancher/rancher

Rancher Webhook is misconfigured during upgrade process

vyper

Incorrect success value returned in vyper

embano1/wip

Arbitrary command injection in embano1/wip

kiwitcms

vyper

iotjs, iotjs

iotjs, iotjs

iotjs, iotjs

iotjs, iotjs

kgraft-patch-SLE12-SP4_Update_34

Security update for the Linux Kernel (Live Patch 34 for SLE 12 SP4)

Vyper's raw_call with outsize=0 and revert_on_failure=False returns incorrect success value

Kiwi TCMS has command injection vulnerability in changelog.yml CI workflow

linux, linux, linux

linux, linux, linux

libxml2, libxml2, libxml2

libxml2, libxml2, libxml2, libxml2, libxml2, libxml2, libxml2, libxml2

libxml2, libxml2, libxml2

libxml2, libxml2, libxml2, libxml2, libxml2, libxml2, libxml2, libxml2

kernel

CVE-2023-2019 affecting package kernel for versions less than 5.15.111.1-1

kernel

CVE-2023-2006 affecting package kernel for versions less than 5.15.111.1-1

libxml2

CVE-2023-29469 affecting package libxml2 for versions less than 2.10.4-1

libxml2

CVE-2023-28484 affecting package libxml2 for versions less than 2.10.4-1

CVE-2023-2006 does not affect BellSoft software

linux-hwe-edge, linux-aws-5.0, linux-aws-5.3, linux-azure, linux-azure-5.3, linux-azure-edge, linux-gcp, linux-gcp-5.3, linux-gke-4.15, linux-gke-5.4, linux-gkeop-5.4, linux-hwe, linux-oem, linux-oracle-5.0, linux-oracle-5.3, linux-aws-5.15, linux-azure-5.15, linux-azure-fde-5.15, linux-gcp-5.15, linux-gke-5.15, linux-gkeop-5.15, linux-hwe-5.15, linux-intel-iotg-5.15, linux-lowlatency-hwe-5.15, linux-oracle-5.15, linux-riscv-5.15, linux-aws-5.11, linux-aws-5.13, linux-aws-5.8, linux-azure-5.11, linux-azure-5.13, linux-azure-5.8, linux-gcp-5.11, linux-gcp-5.13, linux-gcp-5.8, linux-hwe-5.11, linux-hwe-5.13, linux-hwe-5.8, linux-intel-5.13, linux-oem-5.10, linux-oem-5.13, linux-oem-5.14, linux-oem-5.6, linux-oracle-5.11, linux-oracle-5.13, linux-oracle-5.8, linux-raspi2, linux-riscv, linux-riscv-5.11, linux-riscv-5.8, linux, linux-aws, linux-azure, linux-azure-fde, linux-gcp, linux-gke, linux-gkeop, linux-ibm, linux-intel-iot-realtime, linux-intel-iotg, linux-kvm, linux-lowlatency, linux-nvidia, linux-oem-5.17, linux-oracle, linux-raspi, linux-realtime, linux-riscv, linux-realtime, linux-raspi-realtime

linux-hwe-edge, linux-aws-5.0, linux-aws-5.3, linux-azure, linux-azure-5.3, linux-azure-edge, linux-gcp, linux-gcp-5.3, linux-gke-4.15, linux-gke-5.4, linux-gkeop-5.4, linux-hwe, linux-oem, linux-oracle-5.0, linux-oracle-5.3, linux-aws-5.15, linux-azure-5.15, linux-azure-fde-5.15, linux-gcp-5.15, linux-gke-5.15, linux-gkeop-5.15, linux-hwe-5.15, linux-intel-iotg-5.15, linux-lowlatency-hwe-5.15, linux-oracle-5.15, linux-riscv-5.15, linux-aws-5.11, linux-aws-5.13, linux-aws-5.8, linux-azure-5.11, linux-azure-5.13, linux-azure-5.8, linux-gcp-5.11, linux-gcp-5.13, linux-gcp-5.8, linux-hwe-5.11, linux-hwe-5.13, linux-hwe-5.8, linux-intel-5.13, linux-oem-5.10, linux-oem-5.13, linux-oem-5.14, linux-oem-5.6, linux-oracle-5.11, linux-oracle-5.13, linux-oracle-5.8, linux-raspi2, linux-riscv, linux-riscv-5.11, linux-riscv-5.8, linux, linux-aws, linux-azure, linux-azure-5.19, linux-azure-fde, linux-gcp, linux-gke, linux-gkeop, linux-hwe-5.19, linux-ibm, linux-intel-iotg, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.19, linux-nvidia, linux-oem-5.17, linux-oem-6.0, linux-oracle, linux-raspi, linux-realtime, linux-riscv, linux-bluefield, linux-intel-iot-realtime, linux-realtime, linux-raspi-realtime

Arbitrary command injection in embano1/wip

drupal/core, drupal/core

Access bypass in Drupal Core

jellyfin-web has a stored cross-site scripting vulnerability in devices.js

Jellyfin vulnerable to directory traversal and file write causing arbitrary code execution

Laminas Diactoros vulnerable to HTTP Multiline Header Termination