Open Source Vulnerabilities

Manipulated inline images can cause Infinite Loop in PyPDF2

gzip, gzip

gzip - security update

xz-utils, xz-utils

xz-utils - security update

gzip, gzip, gzip, gzip, gzip, gzip, gzip, gzip, gzip, gzip

Security update for gzip

Heap-based Buffer Overflow in radareorg/radare2

ghostscript

Segv on unknown address in gs_heap_free_object

snipe/snipe-it

Cross-site Scripting in snipe-it

cross-fetch, cross-fetch

Withdrawn Advisory: Incorrect Authorization in cross-fetch

global heap buffer overflow in skip_range in vim/vim

NULL Pointer Dereference in radareorg/radare2

pywasm3

Stored Cross Site Scripting vulnerability in Item name parameter in snipe/snipe-it

gd, gd, gd, gd

gd security update

kernel, kernel, kernel, kernel

kernel security update

bind

bind security update

mariadb

mariadb security update

ghostscript

UNKNOWN READ in ref_stack_counttomark

com.liferay:com.liferay.dynamic.data.mapping.form.field.type, com.liferay.portal:release.dxp.bom

Liferay Portal and Liferay DXP allows arbitrary injection via form field

Microsoft.PowerShell.SDK, Microsoft.PowerShell.SDK, Microsoft.PowerShell.SDK

PowerShell Elevation of Privilege Vulnerability

Microsoft.Rest.ClientRuntime

Azure SDK for .NET Information Disclosure Vulnerability.

madlib-object-utils

Prototype Pollution in madlib-object-utils

quickjs

Heap-buffer-overflow in JS_CallInternal

abcm2ps

abcm2ps - security update

chromium

chromium - security update

Exposure of Private Personal Information to an Unauthorized Actor in lquixada/cross-fetch

crun

Updated crun packages fix security vulnerability

libarchive

Updated libarchive packages fix security vulnerability

ruby

Updated ruby packages fix security vulnerability

docker-containerd

Updated docker-containerd packages fix security vulnerability

madlib, madlib, madlib, madlib, madlib, madlib, madlib

Prototype Pollution