Open Source Vulnerabilities

libical

Stack-buffer-overflow in simple_str_to_doublestr

systemd

Heap-double-free in nft_set_context_free_many

systemd

Heap-double-free in config_parse_nft_set_context

tmux

Stack-buffer-overflow in input_osc_52

deno

Link Following in Deno

nystudio107/craft-seomatic

Cross-site Scripting in SEOmatic plugin

nystudio107/craft-seomatic

Code Injection in SEOmatic

nuitka

Command Injection in Nuitka

xz, xz-devel, xz-libs, xz-lzma-compat

Important: xz security update

Generation of Error Message Containing Sensitive Information in nocodb/nocodb

php5, php7.0, php7.2, php7.4, php8.1

php5, php7.0, php7.2, php7.4, php8.1

nuitka

nuitka

nuitka, nuitka, nuitka, nuitka, nuitka, nuitka

Code Injection in nuitka/nuitka

systemd

Heap-double-free in nft_set_context_free_many

intelliants/subrion

Cross site scripting in intelliants/subrion

file

Heap-buffer-overflow in json_parse

chromium

chromium - security update

containerd

containerd - security update

lighttpd, lighttpd, lighttpd

lighttpd

ed25519-dalek

Double Public Key Signing Function Oracle Attack on `ed25519-dalek`

rubygem-sinatra

Security update for rubygem-sinatra

couchbase

Couchbase Sync Gateway admin credentials not verified when using X.509 client cert authentication

convert-svg-core

Directory traversal in convert-svg-core

git-promise

OS Command Injection in git-promise

convert-svg-core

Code injection via SVG file in convert-svg-core

com.alibaba:fastjson

Unsafe deserialization in com.alibaba:fastjson

posix

Unhandled crash in npm posix

jpeg-js

Infinite loop in jpeg-js

linux

linux - security update