Open Source Vulnerabilities

KubeOperator is vulnerable to unauthorized access to system API

libapreq2

libapreq2 - security update

Cross-site Scripting (XSS) - Stored in alfio-event/alf.io

Cross-site Scripting (XSS) - Reflected in alfio-event/alf.io

Improper Input Validation in publify/publify

Incorrect Authorization in firefly-iii/firefly-iii

Code Injection in pyload/pyload

Insecure Storage of Sensitive Information in publify/publify

Integer Overflow or Wraparound in publify/publify

golang-golang-x-net, golang-golang-x-net, golang-golang-x-net

opa

CVE-2022-41721 affecting package opa for versions less than 0.50.2-5

golang.org/x/net

Request smuggling due to improper request handling in golang.org/x/net/http2/h2c

@curveball/a12n-server

a12nserver vulnerable to potential SQL Injections via Knex dependency

webbrowser

webbrowser-rs allows attackers to access arbitrary files via supplying a crafted URL

org.neo4j.procedure:apoc, org.neo4j.procedure:apoc

org.neo4j.procedure:apoc Path Traversal Vulnerability

rust-webbrowser, rust-webbrowser

rust-webbrowser, rust-webbrowser