Open Source Vulnerabilities

Key confusion through non-blocklisted public key formats in PyJWT

libxml2, python-libxml2, libxml2, python-libxml2, libxml2, python-libxml2, libxml2, python-libxml2, libxml2, python-libxml2, libxml2, python-libxml2, libxml2, python-libxml2, libxml2, libxml2, python-libxml2, libxml2, python-libxml2, libxml2, python-libxml2, libxml2, python-libxml2, libxml2, python-libxml2, libxml2, python-libxml2

Security update for libxml2

org.xwiki.platform:xwiki-platform-crypto, org.xwiki.platform:xwiki-platform-crypto

Use of a Broken or Risky Cryptographic Algorithm in XWiki Crypto API

github.com/argoproj/argo-cd/v2, github.com/argoproj/argo-cd/v2, github.com/argoproj/argo-cd/v2, github.com/argoproj/argo-cd

Login screen allows message spoofing if SSO is enabled

Path Traversal in filegator/filegator

Session Fixation in filegator/filegator

postgresql-10, postgresql-12, postgresql-14

postgresql-10, postgresql-12, postgresql-13, postgresql-14 vulnerability

accountsservice

accountsservice vulnerability

Business Logic Errors in erudika/para

openldap2, openldap2, openldap2, openldap2, openldap2, openldap2, openldap2, openldap2, openldap2, openldap2

Security update for openldap2

slurm_20_11, slurm_20_11, slurm_20_11, slurm_20_11

Security update for slurm_20_11

MozillaFirefox, MozillaFirefox, MozillaFirefox, MozillaFirefox, MozillaFirefox, MozillaFirefox, MozillaFirefox, MozillaFirefox, MozillaFirefox, MozillaFirefox, MozillaFirefox, MozillaFirefox, MozillaFirefox

Security update for MozillaFirefox

go1.18, go1.18, go1.18, go1.18

Security update for go1.18

cacti, cacti-spine, cacti, cacti-spine, cacti, cacti-spine

Security update for cacti, cacti-spine

org.apache.maven.shared:maven-shared-utils

Command injection in Apache Maven maven-shared-utils

publify_core

Publify has Improper Access Controls

publify_core

Publify vulnerable to cross site scripting

com.xuxueli:xxl-job

Cross-Site Request Forgery in XXL-Job

lrzip, lrzip

lrzip - security update

firefox-esr

firefox-esr - security update

PHP Code Injection by malicious block or filename in Smarty

puma

puma - security update

accountsservice

nokogiri

Nokogiri Improperly Handles Unexpected Data Type

stdlib

Request smuggling due to accepting invalid headers in net/http via net/textproto

htmldoc, htmldoc

htmldoc vulnerability

stdlib

Stack exhaustion when compiling deeply nested expressions in regexp