Open Source Vulnerabilities

crossbeam

`MsQueue` `push`/`pop` use the wrong orderings

Cross-site Scripting (XSS) - Reflected in neorazorx/facturascripts

espeak-ng

Stack-buffer-overflow in strcat

github.com/projectcalico/calico, github.com/projectcalico/calico, github.com/projectcalico/calico

Calico vulnerable to pod route hijacking

org.elasticsearch:elasticsearch

Improper Check for Unusual or Exceptional Conditions in Elasticsearch

jmespath

JMESPath for Ruby uses unsafe JSON.load when safe JSON.parse is preferable

org.jodd:jodd-http

Server-Side Request Forgery in Jodd HTTP

binutils

Null-dereference READ

avahi

avahi - security update

librecad

librecad - security update

Potential stack buffer overflow when parsing message as a STUN client

Out-of-bounds Write in vim/vim

ruby2.3

ruby2.3 vulnerability

,

ruby-jmespath, ruby-jmespath, ruby-jmespath

ruby-jmespath, ruby-jmespath, ruby-jmespath, ruby-jmespath, ruby-jmespath

github.com/containerd/containerd, github.com/containerd/containerd

containerd CRI plugin: Host memory exhaustion through ExecSync

bypass of CVE-2021-25640

github.com/cri-o/cri-o, github.com/cri-o/cri-o, github.com/cri-o/cri-o

Node DOS by way of memory exhaustion through ExecSync request in CRI-O

silverstripe/silverstripe-omnipay, silverstripe/silverstripe-omnipay, silverstripe/silverstripe-omnipay, silverstripe/silverstripe-omnipay

Failed payment recorded has completed in Silverstripe Omnipay

django-s3file

Path Traversal in django-s3file

vyper

Multiple evaluation of contract address in call in vyper

github.com/pingcap/tidb, github.com/pingcap/tidb, github.com/pingcap/tidb

TiDB authentication bypass vulnerability

trilogy

Use of Uninitialized Variable in trilogy

oauthenticator

Authorization Bypass Through User-Controlled Key when using CILogonOAuthenticator oauthenticator

Authorization Bypass Through User-Controlled Key when using CILogonOAuthenticator in oauthenticator

DoS Vulnerability in URLEncodedFormDecoder in Vapor

Use of Uninitialized Variable in trilogy

Multiple evaluation of contract address in call in vyper

Failed payment recorded has completed in silverstripe/silverstripe-omnipay

Tracker report renderer and chart widgets leak information in Tuleap

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in django-s3file