Open Source Vulnerabilities

github.com/hashicorp/go-getter, github.com/hashicorp/go-getter, github.com/hashicorp/go-getter/v2, github.com/hashicorp/go-getter/s3/v2, github.com/hashicorp/go-getter/gcs/v2

HashiCorp go-getter command injection

github.com/hashicorp/go-getter, github.com/hashicorp/go-getter/v2, github.com/hashicorp/go-getter/s3/v2, github.com/hashicorp/go-getter/gcs/v2

Resource exhaustion in github.com/hashicorp/go-getter and related modules

github.com/gphper/ginadmin

Arbitrary file read in ginadmin

github.com/gphper/ginadmin

Path traversal in ginadmin

wireshark

Stack-use-after-return in conversation_match_element_list

xstream

Uncaught exception in com.ctc.wstx.dtd.FullDTDReader.readContentSpec

neutron

neutron - security update

Heap-based Buffer Overflow in vim/vim

filezilla

filezilla - security update

puma

puma - security update

python-django

python-django - security update

irssi

irssi - security update

cups, cups

cups - security update

sox, sox

sox, sox

sox

CVE-2022-31650 affecting package sox 14.4.2.0-34

sox

CVE-2022-31651 affecting package sox 14.4.2.0-34

sox

CVE-2022-31651 affecting package sox 14.4.2.0-34

sox

CVE-2022-31650 affecting package sox 14.4.2.0-34

sox, sox, sox, sox, sox

sox, sox, sox, sox, sox, sox, sox

ctx

Malware in ctx

fof/upload

Possible cross-site scripting attack via unsanitized SVG files in FoF Upload

org.xwiki.platform:xwiki-platform-wiki-ui-mainwiki, org.xwiki.platform:xwiki-platform-wiki-ui-mainwiki, org.xwiki.platform:xwiki-platform-wiki-ui-mainwiki

Cross-site Scripting in wiki manager join wiki page

org.xwiki.platform:xwiki-platform-flamingo-theme-ui, org.xwiki.platform:xwiki-platform-flamingo-theme-ui, org.xwiki.platform:xwiki-platform-flamingo-theme-ui

Cross-site Scripting in the Flamingo theme manager

com.vaadin:vaadin, com.vaadin:vaadin, com.vaadin:vaadin, com.vaadin:vaadin-grid-flow, com.vaadin:vaadin-grid-flow, com.vaadin:vaadin-grid-flow

Possible information disclosure inside TreeGrid component with default data provider

mautic/core

Cross-site Scripting vulnerability in Mautic's tracking pixel functionality

io.github.javaezlib:JavaEZ

Reversible One-Way Hash in io.github.javaezlib:JavaEZ

pocketmine/pocketmine-mp

Denial-of-service vulnerability processing large chat messages containing many newlines

Possible cross-site scripting attack via unsanitized SVG files in FoF Upload

Possible vulnerability at 'npm install' time in sharp if an attacker has control over build environment

mariadb, mariadb, mariadb, mariadb, mariadb, mariadb, mariadb, mariadb, mariadb

mariadb-10.5

mariadb, mariadb, mariadb, mariadb, mariadb, mariadb, mariadb, mariadb, mariadb

mariadb-10.5

mariadb, mariadb, mariadb, mariadb, mariadb, mariadb, mariadb, mariadb, mariadb

mariadb-10.5

mariadb, mariadb, mariadb, mariadb, mariadb, mariadb, mariadb, mariadb, mariadb

mariadb-10.5

libjpeg, libjpeg, libjpeg