Open Source Vulnerabilities

libtar, libtar, libtar, libtar, libtar

libtar, libtar, libtar, libtar, libtar

golang-1.18, golang-1.18, golang-1.18

golang-1.13, golang-1.18, golang-1.13, golang-1.16, golang-1.13, golang-1.16, golang-1.18, golang-1.13, golang-1.18

golang-1.13, golang-1.18, golang-1.13, golang-1.16, golang-1.13, golang-1.16, golang-1.18, golang-1.13, golang-1.17, golang-1.18

golang-1.18, golang-1.16, golang-1.16, golang-1.18, golang-1.18

golang-1.13, golang-1.18, golang-1.13, golang-1.16, golang-1.13, golang-1.16, golang-1.18, golang-1.13, golang-1.18

golang-1.13, golang-1.18, golang-1.13, golang-1.16, golang-1.13, golang-1.16, golang-1.18, golang-1.13, golang-1.18

golang-1.13, golang-1.18, golang-1.13, golang-1.16, golang-1.13, golang-1.16, golang-1.18, golang-1.13, golang-1.18

golang-1.13, golang-1.18, golang-1.13, golang-1.16, golang-1.13, golang-1.16, golang-1.18, golang-1.13, golang-1.18

golang-1.13, golang-1.18, golang-1.13, golang-1.16, golang-1.13, golang-1.16, golang-1.18, golang-1.13, golang-1.18

golang-1.10, golang-1.13, golang-1.10, golang-1.6, golang-1.18, golang-1.10, golang-1.13, golang-1.16, golang-1.8, golang-1.9, golang-1.13, golang-1.16, golang-1.18, golang-1.14, golang-1.13, golang-1.17, golang-1.18

CVE-2022-30580 does not affect BellSoft software

CVE-2022-30629 does not affect BellSoft software

CVE-2022-29804 does not affect BellSoft software

golang-1.13, golang-1.18, golang-1.13, golang-1.16, golang-1.13, golang-1.16, golang-1.18, golang-1.13, golang-1.18

github.com/sigstore/cosign

cosign's `cosign verify-attestaton --type` can report a false positive if any attestation exists

github.com/sigstore/policy-controller

PolicyController before 0.2.1 may bypass attestation verification

kernel-livepatch-SLE15-SP3_Update_5, kernel-livepatch-SLE15-SP3_Update_6, kernel-livepatch-SLE15-SP3_Update_9, kernel-livepatch-SLE15-SP3_Update_10, kernel-livepatch-SLE15-SP3_Update_5, kernel-livepatch-SLE15-SP3_Update_6, kernel-livepatch-SLE15-SP3_Update_9, kernel-livepatch-SLE15-SP3_Update_10, kernel-livepatch-SLE15-SP3_Update_5, kernel-livepatch-SLE15-SP3_Update_6, kernel-livepatch-SLE15-SP3_Update_9, kernel-livepatch-SLE15-SP3_Update_10, kernel-livepatch-SLE15-SP3_Update_5, kernel-livepatch-SLE15-SP3_Update_6, kernel-livepatch-SLE15-SP3_Update_9, kernel-livepatch-SLE15-SP3_Update_10

Security update for the Linux Kernel (Live Patch 10 for SLE 15 SP3)

fish, fish

fish vulnerability

linux-oem-5.14, linux-oem-5.17

linux-oem-5.14, linux-oem-5.17 vulnerabilities

linux-aws-5.15, linux-azure-5.15, linux-gcp-5.15, linux-gke-5.15, linux-aws, linux-azure, linux-gcp, linux-gke, linux-ibm, linux-kvm, linux-oracle, linux-raspi

linux-aws, linux-aws-5.15, linux-azure, linux-azure-5.15, linux-gcp, linux-gcp-5.15, linux-gke, linux-gke-5.15, linux-ibm, linux-kvm, linux-oracle, linux-raspi vulnerabilities

nbconvert

nbconvert vulnerable to cross-site scripting (XSS) via multiple exploit paths

linux-hwe-5.15, linux-lowlatency-hwe-5.15, linux, linux-lowlatency

linux, linux-hwe-5.15, linux-lowlatency, linux-lowlatency-hwe-5.15 vulnerabilities

owning_ref

owning_ref vulnerable to multiple soundness issues

linux-intel-iotg

linux-intel-iotg vulnerabilities

http-parser

http-parser vulnerability

Server-Side Request Forgery (SSRF) in kareadita/kavita

drupal/jquery_ui_checkboxradio

linux-aws-5.4, linux-azure-5.4, linux-gcp-5.4, linux-gke-5.4, linux-gkeop-5.4, linux-hwe-5.4, linux-ibm-5.4, linux-oracle-5.4, linux-raspi-5.4, linux, linux-aws, linux-azure, linux-bluefield, linux-gcp, linux-gke, linux-gkeop, linux-ibm, linux-kvm, linux-oracle, linux-raspi

linux, linux-aws, linux-aws-5.4, linux-azure, linux-azure-5.4, linux-bluefield, linux-gcp, linux-gcp-5.4, linux-gke, linux-gke-5.4, linux-gkeop, linux-gkeop-5.4, linux-hwe-5.4, linux-ibm, linux-ibm-5.4, linux-kvm, linux-oracle, linux-oracle-5.4, linux-raspi, linux-raspi-5.4 vulnerabilities

kernel-livepatch-SLE15-SP3_Update_7

Security update for the Linux Kernel (Live Patch 7 for SLE 15 SP3)