Open Source Vulnerabilities

pypy3, pypy3, pypy3, python3.11

python3

CVE-2021-28861 affecting package python3 for versions less than 3.9.19-1

python3.5, python3.9, python3.10

CVE-2021-28861 does not affect BellSoft software

octoprint

Unverified Password Change in OctoPrint

notrinos/notrinos-erp

Missing password strength check in notrinos/notrinos-erp

yetiforce/yetiforce-crm

Cross site scripting in yetiforce/yetiforce-crm

org.keycloak:keycloak-parent

Incorrect implementation of lockout feature in Keycloak

mobiledoc-kit

Cross site scripting in mobiledoc-kit

yetiforce/yetiforce-crm

Cross site scripting in yetiforce/yetiforce-crm

eth-account

Regular expression denial of service in eth-account

http.server: Open Redirection if the URL path starts with //

Use After Free in vim/vim

open-vm-tools, open-vm-tools, open-vm-tools, open-vm-tools

HTML Injection in ActiveMQ Artemis Web Console

vim, vim, vim, vim, vim, vim, vim

vim, vim, vim

vim

CVE-2022-2923 affecting package vim for versions less than 9.0.0325-1

vim, vim, vim

rubygem-rails-html-sanitizer, rubygem-rails-html-sanitizer, rubygem-rails-html-sanitizer, rubygem-rails-html-sanitizer, rubygem-rails-html-sanitizer, rubygem-rails-html-sanitizer, rubygem-rails-html-sanitizer

Security update for rubygem-rails-html-sanitizer

hdf5, hdf5, hdf5

hdf5, hdf5, hdf5

hdf5, hdf5, hdf5

texlive-bin, ipe, xpdf, texlive-bin, ipe, xpdf, texlive-bin, ipe, ipe, texlive-bin, ipe, texlive-bin, ipe, texlive-bin, ipe, texlive-bin

hdf5, hdf5, hdf5, hdf5, hdf5

hdf5, hdf5, hdf5, hdf5, hdf5

hdf5, hdf5, hdf5, hdf5, hdf5