Open Source Vulnerabilities

thunderbird, thunderbird

thunderbird - security update

tiff, tiff, tiff

tiff, tiff, tiff, tiff, tiff, tiff, tiff, tiff, tiff, tiff

openjpeg2

CVE-2022-34526 affecting package openjpeg2 2.3.1-12

libtiff

CVE-2022-34526 affecting package libtiff for versions less than 4.4.0-3

tiff, tiff, tiff, tiff, tiff

juniper

Juniper is vulnerable to @DOS GraphQL Nested Fragments overflow

flask-appbuilder

Flask-AppBuilder before v4.1.3 allows inference of sensitive information through query strings

prestashop/prestashop

PrestaShop eval injection possible if shop vulnerable to SQL injection

scrapy, scrapy

Scrapy before 2.6.2 and 1.8.3 vulnerable to one proxy sending credentials to another

mezzio/mezzio-swoole, mezzio/mezzio-swoole

mezzio-swoole Applications Using Diactoros Vulnerable to HTTP Host Header Attack

co.fs2:fs2-io, co.fs2:fs2-io_2.12, co.fs2:fs2-io_3, co.fs2:fs2-io_2.13, co.fs2:fs2-io_sjs1_2.13, co.fs2:fs2-io_sjs1_3

fs2-io skips mTLS client verification

async-graphql

async-graphql / async-graphql - @DOS GraphQL Nested Fragments overflow

chia-blockchain

webmin

Updated webmin packages fix security vulnerability

firefox, firefox-l10n, nss

Updated firefox packages fix security vulnerability

python-ujson

Updated python-ujson packages fix security vulnerability

gdk-pixbuf2.0

Updated gdk-pixbuf2.0 packages fix security vulnerability

chromium-browser-stable

Updated chromium-browser-stable packages fix security vulnerability

mellium.im/xmpp

Man-in-the-middle attack due to improper validation of certificate in mellium.im/xmpp

github.com/docker/distribution

Type confusion in github.com/docker/distribution

check-spelling/check-spelling

check-spelling workflow vulnerable to token leakage via symlink attack

dogtag-pki

dogtag-pki, dogtag-pki, dogtag-pki, dogtag-pki