Open Source Vulnerabilities

shopware/platform, shopware/core

Improper Access Control in Shopware

shopware/platform, shopware/core

Server-Side Request Forgery (SSRF) in Shopware

pocketmine/pocketmine-mp

Insufficient type validation in pocketmine/pocketmine-mp

github.com/swaggo/http-swagger

Denial of Service in http-swagger

pypdf2

Manipulated inline images can cause Infinite Loop in PyPDF2

next-auth, next-auth

NextAuth.js default redirect callback vulnerable to open redirects

django-mfa3

Improper Authentication in django-mfa3

github.com/cri-o/cri-o

Incorrect Default Permissions in CRI-O

DisCatSharp

Exposure of Sensitive Information to an Unauthorized Actor in DisCatSharp

org.geoserver:gs-main, org.geoserver:gs-main

Improper Input Validation in GeoServer

xml2rfc

SVG with embedded scripts can lead to cross-site scripting attacks in xml2rfc

vyper

Integer bounds error in Vyper

Yarp.ReverseProxy, Yarp.ReverseProxy

YARP Denial of Service Vulnerability

ckb

Dep Group Remote Memory Exhaustion (Denial of Service) in ckb

afire

Relative Path Traversal in afire serve_static

composer/composer, composer/composer, composer/composer

Missing input validation can lead to command execution in composer

github.com/git-lfs/git-lfs/v3, github.com/git-lfs/git-lfs

Git LFS can execute a binary from the current directory on Windows

Command Injection vulnerability in [email protected] in yarkeev/git-interface

openscad

Updated openscad packages fix security vulnerability

git

Updated git packages fix security vulnerability

Reflected XSS on demo.microweber.org/demo/module/ in microweber/microweber

linux, linux, linux

kernel

CVE-2022-29582 affecting package kernel for versions less than 5.15.37.1-2