Open Source Vulnerabilities

libxml2

Updated libxml2 packages fix security vulnerability

apache-mod_wsgi

Updated apache-mod_wsgi packages fix security vulnerability

webkit2

Updated webkit2 packages fix security vulnerability

libtirpc

Updated libitrpc packages fix security vulnerability

trivy, trivy

Security update for trivy

jackson-dataformats-text

Security exception in com.fasterxml.jackson.dataformat.toml.Parser.parseInlineTable

xstream

Security exception in com.ctc.wstx.dtd.FullDTDReader.readContentSpec

ghostscript

UNKNOWN WRITE in pdfi_free_array

ghostscript

Global-buffer-overflow in chunk_obj_alloc

Jellyfin.Common

Incorrect Access Control and Cross Site Scripting in Jellyfin

com.xuxueli:xxl-job

Improper Privilege Management in com.xuxueli:xxl-job

magento/community-edition, magento/community-edition, magento/project-community-edition, magento/community-edition, magento/community-edition, magento/community-edition

Magento Open Source has Improper Access Control vulnerability

ghostscript

Heap-buffer-overflow in gs_type2_interpret

c-blosc2

Heap-buffer-overflow in do_job

xstream

Security exception in com.ctc.wstx.dtd.FullDTDReader.readContentSpec

kicad

kicad - security update

SQL Injection in Project-nexus

ghostscript, ghostscript, ghostscript

CVE-2020-27792 does not affect BellSoft software

radare2, radare2, radare2

radare2, radare2

radare2, radare2, radare2

ghostscript, ghostscript, ghostscript

Adobe Commerce Improper Access Control Security feature bypass

Unhandled exception on illegal filename_disk value

,

Incorrect parsing of access level in gomatrixserverlib and dendrite

Message length overflow in frontier

Stack overflow in Jsonxx

Double free or Use after Free in Value class of Jsonxx

Cross-site Scripting (XSS) - DOM in chatwoot/chatwoot