Open Source Vulnerabilities

loopback-connector-postgresql

loopback-connector-postgresql Vulnerable to Improper Sanitization of `contains` Filter

github.com/runatlantis/atlantis

Timing attack in github.com/runatlantis/atlantis

, , ,

django-sendfile2

django-sendfile2 before 0.7.0 contains reflected file download vulnerability

temporary

`temporary` makes use of uninitialized memory

github.com/crypto-org-chain/cronos

Cronos vulnerable to DoS through unintended Contract Selfdestruct

mofh

mofh Vulnerable to Improper Restriction of XML External Entity Reference

openssl, openssl-devel, openssl-libs, openssl-perl, openssl-static

Fixed CVE-2022-2097 in openssl

openssl, openssl-devel, openssl-libs, openssl-perl, openssl-static

Fixed CVE-2022-2097 in openssl

kgraft-patch-SLE12-SP5_Update_25, kgraft-patch-SLE12-SP5_Update_24, kgraft-patch-SLE12-SP5_Update_22, kgraft-patch-SLE12-SP5_Update_25, kgraft-patch-SLE12-SP5_Update_24, kgraft-patch-SLE12-SP5_Update_22, kgraft-patch-SLE12-SP5_Update_25, kgraft-patch-SLE12-SP5_Update_24, kgraft-patch-SLE12-SP5_Update_22

Security update for the Linux Kernel (Live Patch 22 for SLE 12 SP5)

com.adobe.cq:core.wcm.components.core

AEM WCM Core Components CVG Image vulnerable to Reflected Cross-site Scripting

rustdecimal

`rustdecimal` is a malicious crate

tower-http, tower-http

tower-http's improper validation of Windows paths could lead to directory traversal attack

linux, linux, linux

linux, linux, linux