Open Source Vulnerabilities

civicrm, civicrm, civicrm, civicrm

Gradle's dependency verification can ignore checksum verification when signature verification cannot be performed

jquery-validation ReDoS in url2 due to incomplete fix of CVE-2021-43306

Potential Timing Attack Vector in @fastify/bearer-auth

Guest accounts can list all public channels

Malicious imports can lead to Denial of Service

Team members could access sensitive information of other users via an API call

vim-X11, vim-common, vim-enhanced, vim-filesystem, vim-minimal

Fixed CVEs in vim: CVE-2022-2183, CVE-2022-2182, CVE-2022-2207, CVE-2022-2210

openssl, openssl-devel, openssl-perl, openssl-static

Fixed CVEs in openssl: CVE-2022-1292, CVE-2022-2068

openssl, openssl-devel, openssl-libs, openssl-perl, openssl-static

Fixed CVEs in openssl: CVE-2022-1292, CVE-2022-2068

libxml2, libxml2-devel, libxml2-static, python3-libxml2

Fixed CVE-2022-29824 in libxml2

libxml2, libxml2-devel, libxml2-static, python3-libxml2

Fixed CVE-2022-29824 in libxml2

openssl, openssl-devel, openssl-perl, openssl-static

Fixed CVEs in openssl: CVE-2022-2068, CVE-2022-1292

vim-X11, vim-common, vim-enhanced, vim-filesystem, vim-minimal

Fixed CVEs in vim: CVE-2022-2210, CVE-2022-2183, CVE-2022-2207, CVE-2022-2182

dirmngr, gnupg-agent, gnupg2, gpgsm, gpgv2, scdaemon

Fix CVE(s): CVE-2022-34903

imagemagick, imagemagick-6.q16, imagemagick-common, imagemagick-doc, libimage-magick-perl, libimage-magick-q16-perl, libmagick++-6-headers, libmagick++-6.q16-5v5, libmagick++-6.q16-dev, libmagick++-dev, libmagickcore-6-arch-config, libmagickcore-6-headers, libmagickcore-6.q16-2, libmagickcore-6.q16-2-extra, libmagickcore-6.q16-dev, libmagickcore-dev, libmagickwand-6-headers, libmagickwand-6.q16-2, libmagickwand-6.q16-dev, libmagickwand-dev, perlmagick

Fix CVE(s): CVE-2022-32546, CVE-2022-32547, CVE-2022-32545

libssl-dev, libssl-doc, libssl1.0.0, openssl

Fix CVE(s): CVE-2022-1473, CVE-2022-1292, CVE-2022-2068

libecpg-compat3, libecpg-dev, libecpg6, libpgtypes3, libpq-dev, libpq5, postgresql-9.5, postgresql-client-9.5, postgresql-contrib-9.5, postgresql-doc-9.5, postgresql-plperl-9.5, postgresql-plpython-9.5, postgresql-plpython3-9.5, postgresql-pltcl-9.5, postgresql-server-dev-9.5

Fix CVE(s): CVE-2021-23214

vim, vim-athena, vim-athena-py2, vim-common, vim-doc, vim-gnome, vim-gnome-py2, vim-gtk, vim-gtk-py2, vim-gtk3, vim-gtk3-py2, vim-gui-common, vim-nox, vim-nox-py2, vim-runtime, vim-tiny

Fix CVE(s): CVE-2022-2182, CVE-2022-2183, CVE-2022-2210, CVE-2022-2207

nodejs, nodejs, nodejs, nodejs

nodejs, nodejs, nodejs

nodejs, nodejs, nodejs, nodejs, nodejs, nodejs, nodejs, nodejs, nodejs, nodejs, nodejs, nodejs

nodejs, nodejs, nodejs

nodejs, nodejs, nodejs, nodejs, nodejs, nodejs, nodejs, nodejs, nodejs, nodejs, nodejs, nodejs

nodejs, nodejs, nodejs

nodejs, nodejs, nodejs, nodejs, nodejs, nodejs, nodejs, nodejs, nodejs, nodejs, nodejs, nodejs

nodejs, nodejs, nodejs, nodejs, nodejs, nodejs, nodejs, nodejs, nodejs, nodejs, nodejs, nodejs

nodejs, nodejs, nodejs

node-undici, node-undici, node-undici

dogtag-pki