Open Source Vulnerabilities

golang.org/x/crypto

x/crypto/ssh vulnerable to panic via malformed packets

golang.org/x/net, golang.org/x/net/http2

golang.org/x/net/http2 Denial of Service vulnerability

org.gluu:oxauth-common

Gluu Oxauth before v4.4.1 vulnerable to Server-Side Request Forgery attacks via a crafted request_uri parameter

feehi/cms

FeehiCMS has an arbitrary file upload vulnerability

perfetto

Heap-buffer-overflow in perfetto::trace_processor::TrackEventParser::ParseTrackDescriptor

arrow-java

Security exception in java.base/java.nio.Bits.reserveMemory

libgoogle-gson-java

libgoogle-gson-java - security update

libgoogle-gson-java

libgoogle-gson-java - security update

gpac

tinyexr, tinyexr, tinyexr

assimp, assimp, assimp

pyassimp

assimp, assimp, assimp, assimp, assimp, assimp, assimp

gpac, gpac, gpac, gpac, gpac, gpac

tinyexr, tinyexr, tinyexr, tinyexr

GrowthBook account creation and file upload vulnerability in self-hosted configurations

Shescape Inefficient Regular Expression Complexity vulnerability

SilverwareGames.io used == for hashing instead of ===

Elrond go can execute on same context checks in VM

vim, vim, vim

vim, vim, vim, vim, vim, vim, vim

vim

CVE-2022-3134 affecting package vim for versions less than 9.0.0490-1

vim, vim, vim, vim, vim

elrond-go MultiESDTNFTTransfer call on a SC address with missing function name

Discourse-Chat Cross-Site Scripting issue for channel names and descriptions