Open Source Vulnerabilities

rdiffweb

arr-pm

arr-pm vulnerable to arbitrary shell execution when extracting or listing files contained in a malicious rpm.

jwcrypto

jwcrypto token substitution can lead to authentication bypass

Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in ikus060/rdiffweb

Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in ikus060/minarca

bind9, bind9

bind9 vulnerabilities

personnummer

personnummer/rust vulnerable to Improper Input Validation

github.com/pandatix/go-cvss

Panic in github.com/pandatix/go-cvss

github.com/hashicorp/consul-template

Exposure of Vault secrets via error messages in github.com/hashicorp/consul-template

github.com/theupdateframework/go-tuf

Improper handling of keys in github.com/theupdateframework/go-tuf

github.com/containers/buildah

Unauthorized file access in github.com/containers/buildah

libconfuse0

Security update for libconfuse0

erlang, erlang, erlang