Open Source Vulnerabilities

Missing validation causes `TensorSummaryV2` in TensorFlow to crash

stdlib

Panic due to large inputs affecting P-256 curves in crypto/elliptic

stdlib

Stack overflow from a large amount of PEM data in encoding/pem

Missing validation causes denial of service via `DeleteSessionTensor` in TensorFlow

Missing validation causes denial of service via `GetSessionTensor` in TensorFlow

Missing validation crashes `QuantizeAndDequantizeV4Grad` in TensorFlow

Use of Hard-coded Cryptographic Key in rundeck/rundeck, rundeckpro/enterprise

contao/core-bundle, contao/contao

Cross site scripting via canonical tag in Contao

Observable Timing Discrepancy in totp-rs

Command Injection/Argument Injection in GoCD

ruby-nokogiri, ruby-nokogiri, ruby-nokogiri

pywasm3

ruby-nokogiri, ruby-nokogiri

Reflected XSS in GoCD

DOM-based XSS in GoCD

Improper Privilege Management in Cilium

Incorrect Default Permissions in Cilium

Improper Privilege Management in polonel/trudesk

github.com/fluxcd/kustomize-controller, github.com/fluxcd/flux2

Improper path handling in Kustomization files allows for denial of service

DoS via malicious p2p message in Go-Ethereum

Grafana Enterprise datasource network restrictions bypass via HTTP redirects

Bypass of password requirements when sharing a folder via the Circles app in Nextcloud Server

Sensitive files/data exist after deletion of user account in Nextcloud Android

Error in deleting deck cards attachment reveals the full application path in Nextcloud Deck

Possibility for anyone to add a stack with existing tasks on anyone's board in Nextcloud Deck