Open Source Vulnerabilities

VelaUX APIServer vulnerable to Authentication Bypass by Capture-replay

GoCD Windows installations outside default location inadequately restrict installation file permissions

linked_list_allocator vulnerable to out-of-bound writes on `Heap` initialization and `Heap::extend`

node-jose, node-jose

mangadex-downloader

nagios3, icinga, icinga, nagios3, nagios4, nagios4, nagios4, nagios4, nagios4

nagios3, icinga, icinga, nagios3, nagios4, nagios4, nagios4, nagios4, nagios4

nagios3, icinga, icinga, nagios3, nagios4, nagios4, nagios4, nagios4, nagios4

nagios3, icinga, icinga, nagios3, nagios4, nagios4, nagios4, nagios4, nagios4

nagios3, icinga, icinga, nagios3, nagios4, nagios4, nagios4, nagios4, nagios4

nagios3, icinga, icinga, nagios3, nagios4, nagios4, nagios4, nagios4, nagios4

node-jose, jose, jose, jose

JOSE vulnerable to resource exhaustion via specifically crafted JWE

mangadex-downloader vulnerable to unauthorized file reading

helm

CVE-2022-36049 affecting package helm for versions less than 3.9.4-2

Wikmd Cross-site Scripting vulnerability

Wikmd vulnerable to Local File Enumeration when accessing /list

Parse Server vulnerable to brute force guessing of user sensitive data via search patterns

Flux2 Helm Controller denial of service

RubyGems allows creation of users with arbitrary unverified emails

poetry-core, poetry-core, poetry-core

poetry

CVE-2022-36069 affecting package poetry 1.0.10-2

poetry

poetry

poetry, poetry, poetry, poetry

Poetry Argument Injection vulnerability can lead to local Code Execution

Poetry's Untrusted Search Path can lead to Local Code Execution on Windows

drupal/permissions_by_term