Open Source Vulnerabilities

golang-github-containers-buildah, golang-github-containers-buildah, golang-github-containers-buildah, golang-github-containers-buildah

golang-github-containers-buildah, golang-github-containers-buildah, golang-github-containers-buildah, golang-github-containers-buildah

github.com/ipfs/go-merkledag

go-merkledag's ProtoNode may be modified such that common method calls may panic

prestashop/prestashop

PrestaShop has potential Information exposure in the upload directory

github.com/traefik/traefik/v2

Traefik may display authorization header in the debug logs

github.com/traefik/traefik/v2

Traefik routes exposed with an empty TLSOption

secp256k1, secp256k1, secp256k1

Unsound API in `secp256k1` allows use-after-free and invalid deallocation from safe code

nl.basjes.parse.useragent:yauaa, nl.basjes.parse.useragent:yauaa-beam, nl.basjes.parse.useragent:yauaa-beam-sql, nl.basjes.parse.useragent:yauaa-drill, nl.basjes.parse.useragent:yauaa-elasticsearch, nl.basjes.parse.useragent:yauaa-elasticsearch-8, nl.basjes.parse.useragent:yauaa-flink, nl.basjes.parse.useragent:yauaa-flink-table, nl.basjes.parse.useragent:yauaa-hive, nl.basjes.parse.useragent:yauaa-logparser, nl.basjes.parse.useragent:yauaa-snowflake, nl.basjes.parse.useragent:yauaa-trino

Yauaa vulnerable to ArrayIndexOutOfBoundsException triggered by a crafted Sec-Ch-Ua-Full-Version-List

pdsh, pdsh_slurm_22_05, slurm_22_05, pdsh, pdsh_slurm_22_05, slurm_22_05, pdsh_slurm_20_11, pdsh_slurm_20_11

Recommended update for pdsh, slurm_22_05

pdsh, pdsh_slurm_22_05, slurm_22_05, pdsh, pdsh_slurm_22_05, slurm_22_05, pdsh, pdsh_slurm_22_05, slurm_22_05, pdsh, pdsh_slurm_22_05, slurm_22_05

Recommended update for pdsh, slurm_22_05

netatalk, netatalk

Security update for netatalk

python2.7, python3.6, python3.8, python3.10

python2.7, python3.10, python3.6, python3.8 vulnerabilities

glibc

glibc vulnerabilities

rubygem-actionpack-3_2

Security update for rubygem-actionpack-3_2

wabt

Object-size in wabt::BinaryReaderIR::OnCodeMetadataCount

net.mingsoft:ms-mcms

Mingsoft MCMS vulnerable to Cross-site Scripting

libbpf

libbpf vulnerabilities

com.ruoyi:ruoyi-common

RuoYi-Cloud Cross-site Scripting vulnerability

chromium, chromium, chromium, chromium

Security update for chromium

ruby-nokogiri, ruby-nokogiri, ruby-nokogiri

ruby-nokogiri, ruby-nokogiri, ruby-nokogiri, ruby-nokogiri, ruby-nokogiri

Kernel

nfs4: Fix kmemleak when allocate slot failed

Kernel

nfc: s3fwrn5: Fix potential memory leak in s3fwrn5_nci_send()

Kernel

nfc: nfcmrvl: Fix potential memory leak in nfcmrvl_i2c_nci_send()

Kernel

net: sched: Fix use after free in red_enqueue()

Kernel

mISDN: fix possible memory leak in mISDN_register_device()

Kernel

rose: Fix NULL pointer dereference in rose_send_frame()

Kernel

btrfs: fix ulist leaks in error paths of qgroup self tests

Kernel

Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu

Kernel

Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()

Kernel

net: mdio: fix undefined behavior in bit shift for __mdiobus_register

Kernel

HID: hyperv: fix possible memory leak in mousevsc_probe()

Kernel

net: gso: fix panic on frag_list with mixed head alloc types

Kernel

capabilities: fix undefined behavior in bit shift for CAP_TO_MASK

Kernel

ipv6: addrlabel: fix infoleak when sending struct ifaddrlblmsg to network

Kernel

tipc: fix the msg->req tlv len check in tipc_nl_compat_name_table_dump_header

Kernel

dmaengine: mv_xor_v2: Fix a resource leak in mv_xor_v2_remove()

Kernel

net: macvlan: fix memory leaks of macvlan_common_newlink

Kernel

nilfs2: fix deadlock in nilfs_count_free_blocks()

Kernel

udf: Fix a slab-out-of-bounds write bug in udf_find_entry()

Kernel

Bluetooth: L2CAP: Fix attempting to access uninitialized memory

Kernel

ASoC: core: Fix use-after-free in snd_soc_exit()

Kernel

ASoC: soc-utils: Remove __exit for snd_soc_util_exit()

Kernel

ext4: fix warning in 'ext4_da_release_space'