Open Source Vulnerabilities

crash, crash, crash, crash

Security update for crash

Server-Side Request Forgery (SSRF) in nocodb/nocodb

org.apache.portals.jetspeed-2:jetspeed-commons

Insufficient user input in Apache Jetspeed-2

org.apache.commons:commons-configuration2

Code injection in Apache Commons Configuration

apache-superset

Apache Superset allows authenticated users to access metadata they have no permission to

qtwebkit-opensource-src, webkit2gtk, qtwebkit-source, webkitgtk, webkit2gtk, qtwebkit-opensource-src, qtwebkit-source, webkitgtk, webkit2gtk, qtwebkit-opensource-src, wpewebkit, qtwebkit-opensource-src, webkit2gtk, wpewebkit, qtwebkit-opensource-src

dovecot, dovecot, dovecot, dovecot, dovecot

qtwebkit-opensource-src, webkit2gtk, qtwebkit-source, webkitgtk, webkit2gtk, qtwebkit-opensource-src, qtwebkit-source, webkitgtk, webkit2gtk, qtwebkit-opensource-src, wpewebkit, qtwebkit-opensource-src, webkit2gtk, wpewebkit, qtwebkit-opensource-src

libecap, libecap-devel, squid

Important: squid:4 security update

squid

Important: squid security update

github.com/ipfs/go-ipfs

DOS and excessive memory usage when passing untrusted user input to to dag import

openssl-src, openssl-src

AES OCB fails to encrypt some bytes

parse-server, parse-server

Protected fields exposed via LiveQuery

next-auth, next-auth

Improper handling of email input

github.com/ipld/go-car, github.com/ipld/go-car/v2

Malformed CAR panics and excessive memory usage

openssh-key-parser

Possible leak of key's raw field if declared length is incorrect

texlive-bin, texlive-bin, texlive-bin

linux, linux, linux

kernel

CVE-2022-2318 affecting package kernel for versions less than 5.15.55.1-1

linux-aws, linux-azure, linux-lts-xenial, linux, linux, linux-aws, linux-aws-hwe, linux-azure, linux-gcp, linux-hwe, linux-kvm, linux-oracle, linux-hwe-edge, linux-fips, linux-fips, linux, linux-aws, linux-aws-5.4, linux-azure-4.15, linux-azure-5.4, linux-dell300x, linux-gcp-4.15, linux-gcp-5.4, linux-hwe-5.4, linux-ibm-5.4, linux-kvm, linux-oracle, linux-oracle-5.4, linux-raspi-5.4, linux-raspi2, linux-snapdragon, linux-aws-5.0, linux-aws-5.3, linux-azure, linux-azure-5.3, linux-azure-edge, linux-gcp, linux-gcp-5.3, linux-gke-4.15, linux-gke-5.4, linux-gkeop-5.4, linux-hwe, linux-hwe-edge, linux-oem, linux-oracle-5.0, linux-oracle-5.3, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux, linux-aws, linux-aws-5.15, linux-azure, linux-azure-5.15, linux-bluefield, linux-gcp, linux-gcp-5.15, linux-gke, linux-gke-5.15, linux-gkeop, linux-hwe-5.15, linux-ibm, linux-intel-iotg-5.15, linux-iot, linux-kvm, linux-lowlatency-hwe-5.15, linux-oracle, linux-oracle-5.15, linux-raspi, linux-riscv-5.15, linux-aws-5.11, linux-aws-5.13, linux-aws-5.8, linux-azure-5.11, linux-azure-5.13, linux-azure-5.8, linux-gcp-5.11, linux-gcp-5.13, linux-gcp-5.8, linux-hwe-5.11, linux-hwe-5.13, linux-hwe-5.8, linux-intel-5.13, linux-oem-5.10, linux-oem-5.13, linux-oem-5.14, linux-oem-5.6, linux-oracle-5.11, linux-oracle-5.13, linux-oracle-5.8, linux-raspi2, linux-riscv, linux-riscv-5.11, linux-riscv-5.8, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux, linux-aws, linux-azure, linux-azure-fde, linux-gcp, linux-gke, linux-gkeop, linux-ibm, linux-intel-iot-realtime, linux-intel-iotg, linux-kvm, linux-lowlatency, linux-nvidia, linux-oem-5.17, linux-oracle, linux-raspi, linux-realtime, linux-riscv, linux-realtime, linux-raspi-realtime

moment, Moment.js

Moment.js vulnerable to Inefficient Regular Expression Complexity

oracleasm, oracleasm, oracleasm, oracleasm, oracleasm, oracleasm

Security update for oracleasm

stdlib, golang.org/x/crypto

Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

node-moment, node-moment, node-moment

gnucash, node-moment, ntopng, sabnzbdplus, wordpress, node-moment, gnucash, mediawiki, ntopng, sabnzbdplus, syncthing, wordpress, node-moment, gnucash, mediawiki, ntopng, omnidb, ruby-momentjs-rails, sabnzbdplus, syncthing, wordpress, gnucash, node-moment, ntopng, odoo, omnidb, ruby-momentjs-rails, sabnzbdplus, wordpress, mediawiki, postfixadmin, syncthing, gnucash, ntopng, odoo, omnidb, ruby-momentjs-rails, sabnzbdplus, wordpress, mediawiki, postfixadmin, syncthing, gnucash, mediawiki, ntopng, odoo, omnidb, postfixadmin, sabnzbdplus, syncthing, wordpress, gnucash, mediawiki, odoo, postfixadmin, sabnzbdplus, wordpress, syncthing

openssh-key-parser

golang.org/x/net

Panic on unconsidered isindex and template combination in golang.org/x/net/html

Improper handling of email input in next-auth

Ownership check missing when updating or deleting mail attachments in Nextcloud mail

Possible leak of key's raw field if declared length is incorrect in openssh_key_parser