Open Source Vulnerabilities

ruby-image-processing, ruby-image-processing

image_processing

Remote shell execution vulnerability in image_processing

fluture-node

Forwarding of confidentials headers to third parties in fluture-node

scrapy, scrapy

Scrapy cookie-setting is not restricted based on the public suffix list

scrapy, scrapy

Incorrect Authorization and Exposure of Sensitive Information to an Unauthorized Actor in scrapy

@finastra/ssr-pages

Cross Site Scripting (XSS) in @finastra/ssr-pages

@finastra/ssr-pages

Path Traversal in @finastra/ssr-pages

mautic/core, mautic/core

Improper regex in htaccess file

github.com/pomerium/pomerium

Multiple security issues in Pomerium's embedded envoy

rudloff/alltube

Server-Side Request Forgery (SSRF) in rudloff/alltube

codeigniter4/framework

Cross-Site Request Forgery (CSRF) Protection Bypass Vulnerability in CodeIgniter4

codeigniter4/framework

Remote CLI Command Execution Vulnerability in CodeIgniter4

request-util

pyquest

github.com/google/fscrypt

Denial of service via insufficient metadata validation

github.com/google/fscrypt

Possible privilege escalation via bash completion script

github.com/google/fscrypt

Possible filesystem space exhaustion by local users

github.com/coredns/coredns

Improper random number generation in github.com/coredns/coredns

Unauthorized forwarding of confidential headers in fluture-node

com.wire:avs

Use of Externally-Controlled Format String in wire-avs

Path Traversal in ssr-pages

php74, php74

Security update for php74

cyrus-sasl, cyrus-sasl, cyrus-sasl, cyrus-sasl, cyrus-sasl, cyrus-sasl, cyrus-sasl

Security update for cyrus-sasl

mc, mc

Security update for mc

glibc, glibc

glibc vulnerabilities

sphinx

Security update for sphinx