Open Source Vulnerabilities

snyk-broker

snyk-broker Path Traversal before v4.73.0

js-ini

js-ini Prorotype Pollution when malicious INI files submitted to an application that parses it with `parse`

node-import

node-import `params` argument can be controlled by users without any sanitization

set-deep-prop

set-deep-prop Prototype Pollution

ntesseract

ntesseract vulnerable to Command Injection

markdown-it-toc

markdown-it-toc Cross-site Scripting due to title of generated toc and contents of header not being escaped

sonar-wrapper

sonar-wrapper Command Injection vulnerability

lcms

Heap-buffer-overflow in TetrahedralInterp16

moodle/moodle, moodle/moodle, moodle/moodle

Moodle LTI module reflected XSS risk

moodle/moodle, moodle/moodle, moodle/moodle

Moodle Open redirect risk in mobile auto-login feature

moodle/moodle, moodle/moodle, moodle/moodle

Moodle Arbitrary file read when importing lesson questions

moodle/moodle, moodle/moodle, moodle/moodle

Moodle Stored XSS and blind SSRF possible via SCORM track details

moodle/moodle, moodle/moodle, moodle/moodle

Moodle PostScript Code Injection

joplin

Joplin is vulnerable to arbitrary code execution

mistune

Mistune vulnerable to catastrophic backtracking

mruby

Segv on unknown address in mpz_add

lcms

Heap-buffer-overflow in cmsMLUgetASCII

lcms

Heap-buffer-overflow in Write16bitTables

lcms

Heap-buffer-overflow in WriteSeqID

linux

linux - security update

spip, spip

spip - security update

openjdk-17

openjdk-17 - security update

grafana

Important: grafana security update

grafana

Important: grafana security update

mistune, mistune, mistune

python-mistune

CVE-2022-34749 affecting package python-mistune for versions less than 0.8.3-5

mistune

mistune, mistune, mistune, mistune

libtiff

Updated libtiff packages fix security vulnerability

logrotate

Updated logrotate packages fix security vulnerability

phpPgAdmin, phpPgAdmin, phpPgAdmin, phpPgAdmin

Security update for phpPgAdmin