Open Source Vulnerabilities

opensc, opensc, opensc, opensc, opensc, opensc, opensc, opensc, opensc, opensc

Security update for opensc

python-django, python-django, python-django

python-django, python-django, python-django

django

django

System.Security.Cryptography.X509Certificates, Microsoft.NETCore.App

Improper Certificate Validation

clamav

Heap-double-free in cli_extract_xlm_macros_and_images

fullpage.js

Prototype Pollution in fullpage.js

studio-42/elfinder

RCE in Studio-42 elFinder on Windows before 2.1.61

bolt/core

Code Injection in Bolt CMS

grok

Use-of-uninitialized-value in grk::N_SCALAR::DecompressIrrev::vtrans

zabbix

zabbix - security update

Uncontrolled search for the Git directory in Git for Windows

Path Traversal in gruntjs/grunt

nekohtml, nekohtml, nekohtml

ruby-nokogiri, ruby-nokogiri, ruby-nokogiri

nekohtml, nekohtml, nekohtml, nekohtml, nekohtml, nekohtml, nekohtml

ruby-nokogiri, ruby-nokogiri, ruby-nokogiri, ruby-nokogiri, ruby-nokogiri

nokogiri

Denial of Service (DoS) in Nokogiri on JRuby

nokogiri

XML Injection in Xerces Java affects Nokogiri

Uncontrolled Resource Consumption in org.cyberneko.html (nokogiri fork)

nokogiri

Out-of-bounds Write in zlib affects Nokogiri

nokogiri

Nokogiri Inefficient Regular Expression Complexity

Command Injection in Appointment Emails for Nextcloud Calendar

Persistent Cross-site Scripting (XSS) vulnerability in PrivateBin

Enumerable upload file names in hedgedoc

Bundled ldap-authentication-plugin fails to neutralise LDAP special elements in usernames