Open Source Vulnerabilities

contao/contao, contao/contao, contao/core-bundle, contao/core-bundle, contao/core, contao/core-bundle

Cross-site Scripting in Contao

com.walmartlabs.concord:concord-common

Exposure of Sensitive Information to an Unauthorized Actor in Concord

org.torpedoquery:org.torpedoquery

Vulnerability in Torpedo Query

com.liferay.portal:release.dxp.bom, com.liferay.portal:release.dxp.bom

Unrestricted Upload of File with Dangerous Type in Liferay Portal and Liferay DXP

org.apache.shardingsphere:shardingsphere

Deserialization of Untrusted Data in Apache ShardingSphere

handlebars

Regular Expression Denial of Service in Handlebars

handlebars, handlebars

Arbitrary Code Execution in Handlebars

org.apache.openmeetings:openmeetings-parent

Denial of service in Apache OpenMeetings

org.apache.tapestry:tapestry-core

Improper file downloads in Apache Tapestry

@atlaskit/editor-core

Cross-site scripting in @atlaskit/editor-core

safetydance

Prototype Pollution in safetydance

org.jenkins-ci.plugins:audit-trail

Request logging bypass in Jenkins Audit Trail Plugin

io.vertx:vertx-web

Path Traversal in Eclipse Vert

org.apache.hadoop:hadoop-main, org.apache.hadoop:hadoop-main, org.apache.hadoop:hadoop-main

Authentication bypass in Apache Hadoop

org.apache.kylin:kylin, org.apache.kylin:kylin

Authentication bypass in Apache Kylin

io.projectreactor.netty:reactor-netty-http

Improper Handling of Exceptional Conditions and Improper Input Validation in Reactor Netty

io.projectreactor.netty:reactor-netty-http, io.projectreactor.netty:reactor-netty-http

Insufficiently Protected Credentials in Reactor Netty

com.typesafe.play:play, com.typesafe.play:play

Data Amplification in Play Framework

com.typesafe.play:play, com.typesafe.play:play, com.typesafe.play:play-java, com.typesafe.play:play-java

Out-of-bounds Write in Play Framework

com.typesafe.play:play, com.typesafe.play:play, com.typesafe.play:play-java, com.typesafe.play:play-java

Uncontrolled Recursion in Play Framework

org.eclipse.hono:hono-core

Improper Validation of Specified Quantity in Input in Eclipse Hono

pathval

Prototype pollution in pathval

kill-port-process

OS Command Injection and Command Injection in kill-port-process

markdown-it-highlightjs

Cross-site Scripting in markdown-it-highlightjs

jsen

Code Injection in jsen

gradle, gradle, gradle, gradle, gradle, gradle, gradle

Dependency verification bypass in Gradle