Open Source Vulnerabilities

Server-Side Request Forgery Information Disclosure Vulnerability

Grafana folders admin only permission privilege escalation

Use After Free in vim/vim

Out of Memory issue in ProtocolBuffers for cpp and python

Arbitrary shell execution when extracting or listing files contained in a malicious rpm.

autogluon-multimodal, autogluon-multimodal

autogluon.multimodal vulnerable to unsafe YAML deserialization

@netlify/ipx

@netlify/ipx vulnerable to Full Response SSRF and Stored XSS via Cache Poisoning and Improper Host Validation

python-jwt

python-jwt vulnerable to token forgery with new claims

parse-server, parse-server

parse-server auth adapter app ID validation can be circumvented

fhir-works-on-aws-authz-smart

fhir-works-on-aws-authz-smart handles permissions improperly

rdiffweb

Cross-Site Request Forgery (CSRF) in ikus060/rdiffweb

networkd-dispatcher, networkd-dispatcher, networkd-dispatcher

networkd-dispatcher, networkd-dispatcher, networkd-dispatcher

parse-server, parse-server

parse-server's session object properties can be updated by foreign user if object ID is known

commonmarker

Unbounded resource exhaustion in cmark-gfm autolink extension may lead to denial of service

rootcerts, nspr, nss, firefox, firefox-l10n

Updated firefox packages fix security vulnerabilities

sofia-sip

Updated sofia-sip packages fix security vulnerability

open-vm-tools

Updated open-vm-tools packages fix security vulnerability

libxslt

Updated libxslt packages fix security vulnerability

google-gson

Updated google-gson packages fix security vulnerability

redis

Updated redis packages fix security vulnerability