Open Source Vulnerabilities

Cross-site Scripting (XSS) - Stored in jgraph/drawio

libserf, libserf, subversion, subversion, utf8proc

Important: subversion:1.14 security update

xz

Important: xz security update

cookiecutter, cookiecutter, cookiecutter

cookiecutter

cookiecutter, cookiecutter, cookiecutter, cookiecutter

Code Injection in jgraph/drawio

opensc, opensc, opensc

opensc vulnerabilities

linux-oem-5.17

linux-oem-5.17 vulnerabilities

linux-oem-5.14

linux-oem-5.14 vulnerabilities

linux, linux-aws, linux-azure, linux-gcp, linux-gke, linux-ibm, linux-intel-iotg, linux-kvm, linux-lowlatency, linux-oracle, linux-raspi

linux, linux-aws, linux-azure, linux-gcp, linux-gke, linux-ibm, linux-intel-iotg, linux-kvm, linux-lowlatency, linux-oracle, linux-raspi vulnerabilities

linux-aws-5.13, linux-azure-5.13, linux-gcp-5.13, linux-hwe-5.13, linux-intel-5.13, linux-oracle-5.13

linux, linux-aws, linux-aws-5.13, linux-azure, linux-azure-5.13, linux-gcp, linux-gcp-5.13, linux-hwe-5.13, linux-intel-5.13, linux-kvm, linux-oracle, linux-oracle-5.13, linux-raspi vulnerabilities

linux-aws-5.4, linux-azure-5.4, linux-gcp-5.4, linux-gke-5.4, linux-gkeop-5.4, linux-hwe-5.4, linux-ibm-5.4, linux-oracle-5.4, linux-raspi-5.4, linux, linux-aws, linux-azure, linux-azure-fde, linux-gcp, linux-gke, linux-gkeop, linux-ibm, linux-kvm, linux-oracle, linux-raspi

linux, linux-aws, linux-aws-5.4, linux-azure, linux-azure-5.4, linux-azure-fde, linux-gcp, linux-gcp-5.4, linux-gke, linux-gke-5.4, linux-gkeop, linux-gkeop-5.4, linux-hwe-5.4, linux-ibm, linux-ibm-5.4, linux-kvm, linux-oracle, linux-oracle-5.4, linux-raspi, linux-raspi-5.4 vulnerabilities

linux-azure, linux-aws-hwe, linux-azure, linux-gcp, linux-hwe, linux-oracle, linux, linux-aws, linux-azure-4.15, linux-gcp-4.15, linux-kvm, linux-oracle, linux-raspi2, linux-snapdragon

linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-4.15, linux-gcp, linux-gcp-4.15, linux-hwe, linux-kvm, linux-oracle, linux-raspi2, linux-snapdragon vulnerabilities

linux-aws, linux-lts-xenial, linux, linux-aws, linux-kvm

linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities

xstream

Uncaught exception in com.ctc.wstx.dtd.FullDTDReader.readContentSpec

laravel/laravel

Unserialized Pop Chain in Laravel

noumo/easyii

Cross-Site Request Forgery in easyii CMS

xz, xz-devel, xz-libs, xz-lzma-compat

Important: xz security update

linux-hwe-edge, linux-aws-5.0, linux-aws-5.3, linux-azure, linux-azure-5.3, linux-azure-edge, linux-gcp, linux-gcp-5.3, linux-gke-4.15, linux-gke-5.4, linux-gkeop-5.4, linux-hwe, linux-oem, linux-oracle-5.0, linux-oracle-5.3, linux-aws-5.15, linux-azure-5.15, linux-gcp-5.15, linux-gke-5.15, linux-hwe-5.15, linux-intel-iotg-5.15, linux-lowlatency-hwe-5.15, linux-oracle-5.15, linux-riscv-5.15, linux-aws-5.11, linux-aws-5.13, linux-aws-5.8, linux-azure-5.11, linux-azure-5.13, linux-azure-5.8, linux-gcp-5.11, linux-gcp-5.13, linux-gcp-5.8, linux-hwe-5.11, linux-hwe-5.13, linux-hwe-5.8, linux-intel-5.13, linux-oem-5.10, linux-oem-5.13, linux-oem-5.6, linux-oracle-5.11, linux-oracle-5.13, linux-oracle-5.8, linux-raspi2, linux-riscv, linux-riscv-5.11, linux-riscv-5.8, linux, linux-aws, linux-azure, linux-gcp, linux-gke, linux-gkeop, linux-ibm, linux-intel-iot-realtime, linux-intel-iotg, linux-kvm, linux-lowlatency, linux-nvidia, linux-oem-5.17, linux-oracle, linux-raspi, linux-realtime, linux-riscv, linux-realtime, linux-raspi-realtime

pocketmine/pocketmine-mp

Improperly checked IDs on itemstacks received from the client leading to server crash in PocketMine-MP

IP address filtering in Google Cloud Platform (GCP) version All versions as of 2022-06-07 and later (unfixed as of yet)