Open Source Vulnerabilities

clamav, clamav, clamav, clamav, clamav, clamav, clamav, clamav, clamav, clamav, clamav

Security update for clamav

,

Cross-site Scripting (XSS) - Stored in ptrofimov/beanstalk_console

util-linux

util-linux vulnerabilities

node-follow-redirects, node-follow-redirects, node-follow-redirects

js-jquery

CVE-2022-0536 affecting package js-jquery 3.5.0-4

node-follow-redirects, node-follow-redirects

elasticsearch, kafka, logstash, openstack-monasca-agent, openstack-monasca-log-metrics, openstack-monasca-log-persister, openstack-monasca-log-transformer, openstack-monasca-persister-java, openstack-monasca-thresh, spark, storm, venv-openstack-aodh, venv-openstack-barbican, venv-openstack-ceilometer, venv-openstack-cinder, venv-openstack-designate, venv-openstack-freezer, venv-openstack-glance, venv-openstack-heat, venv-openstack-horizon-hpe, venv-openstack-ironic, venv-openstack-keystone, venv-openstack-magnum, venv-openstack-manila, venv-openstack-monasca, venv-openstack-monasca-ceilometer, venv-openstack-murano, venv-openstack-neutron, venv-openstack-nova, venv-openstack-octavia, venv-openstack-sahara, venv-openstack-swift, venv-openstack-trove, zookeeper, elasticsearch, kafka, logstash, openstack-monasca-agent, openstack-monasca-log-metrics, openstack-monasca-log-persister, openstack-monasca-log-transformer, openstack-monasca-persister-java, openstack-monasca-thresh, spark, storm, venv-openstack-aodh, venv-openstack-barbican, venv-openstack-ceilometer, venv-openstack-cinder, venv-openstack-designate, venv-openstack-freezer, venv-openstack-glance, venv-openstack-heat, venv-openstack-horizon, venv-openstack-ironic, venv-openstack-keystone, venv-openstack-magnum, venv-openstack-manila, venv-openstack-monasca, venv-openstack-monasca-ceilometer, venv-openstack-murano, venv-openstack-neutron, venv-openstack-nova, venv-openstack-octavia, venv-openstack-sahara, venv-openstack-swift, venv-openstack-trove, zookeeper, elasticsearch, kafka, logstash, openstack-monasca-agent, openstack-monasca-log-metrics, openstack-monasca-log-persister, openstack-monasca-log-transformer, openstack-monasca-persister-java, openstack-monasca-thresh, spark, storm, zookeeper

Security update for elasticsearch, elasticsearch-kit, kafka, kafka-kit, logstash, openstack-monasca-agent, openstack-monasca-log-metrics, openstack-monasca-log-persister, openstack-monasca-log-transformer, openstack-monasca-persister-java, openstack-monasca-persister-java-kit, openstack-monasca-thresh, openstack-monasca-thresh-kit, spark, spark-kit, venv-openstack-monasca, zookeeper, zookeeper-kit

Improper Removal of Sensitive Information Before Storage or Transfer in follow-redirects/follow-redirects

elasticsearch, kafka, logstash, openstack-monasca-agent, openstack-monasca-persister-java, openstack-monasca-thresh, spark, storm, venv-openstack-barbican, venv-openstack-cinder, venv-openstack-designate, venv-openstack-glance, venv-openstack-heat, venv-openstack-horizon, venv-openstack-ironic, venv-openstack-keystone, venv-openstack-magnum, venv-openstack-manila, venv-openstack-monasca, venv-openstack-monasca-ceilometer, venv-openstack-neutron, venv-openstack-nova, venv-openstack-octavia, venv-openstack-sahara, venv-openstack-swift, zookeeper, elasticsearch, kafka, logstash, openstack-monasca-agent, openstack-monasca-persister-java, openstack-monasca-thresh, spark, storm, zookeeper

Security update for elasticsearch, elasticsearch-kit, kafka, kafka-kit, logstash, openstack-monasca-agent, openstack-monasca-persister-java, openstack-monasca-persister-java-kit, openstack-monasca-thresh, openstack-monasca-thresh-kit, spark, spark-kit, storm, storm-kit, venv-openstack-monasca, zookeeper, zookeeper-kit

aspnetcore-runtime-6.0, aspnetcore-targeting-pack-6.0, dotnet, dotnet-apphost-pack-6.0, dotnet-host, dotnet-hostfxr-6.0, dotnet-runtime-6.0, dotnet-sdk-6.0, dotnet-targeting-pack-6.0, dotnet-templates-6.0, netstandard-targeting-pack-2.1

Important: .NET 6.0 security and bugfix update

dotnet6.0

Important: .NET 6.0 security and bugfix update

aspnetcore-runtime-5.0, aspnetcore-targeting-pack-5.0, dotnet-apphost-pack-5.0, dotnet-hostfxr-5.0, dotnet-runtime-5.0, dotnet-sdk-5.0, dotnet-sdk-5.0-source-built-artifacts, dotnet-targeting-pack-5.0, dotnet-templates-5.0

Important: .NET 5.0 security and bugfix update

dotnet5.0

Important: .NET 5.0 security and bugfix update

Cross-site Scripting (XSS) - Stored in chatwoot/chatwoot

Cross-site Scripting (XSS) - Stored in chatwoot/chatwoot

mruby, mruby, mruby, mruby, mruby, mruby, mruby

Out-of-bounds Read in mruby/mruby

, , ,

linux-oem-5.14

linux-oem-5.14 vulnerabilities

org.apache.cassandra:cassandra-all, org.apache.cassandra:cassandra-all

Authentication Bypass in Apache Cassandra

org.keycloak:keycloak-parent

Improper Authentication for Keycloak

org.keycloak:keycloak-parent

Generation of Error Message Containing Sensitive Information in Keycloak

org.keycloak:keycloak-parent

Incorrect Authorization in keycloak

org.keycloak:keycloak-server-spi-private, org.keycloak:keycloak-services

Cross-site Scripting in keycloak

org.keycloak:keycloak-parent

Path Traversal

org.keycloak:keycloak-parent

Incorrect Permission Assignment for Critical Resource and Permissive List of Allowed Inputs in Keycloak

org.keycloak:keycloak-parent

Allocation of Resources Without Limits or Throttling in Keycloak

org.keycloak:keycloak-parent

Cross-site Scripting in Keycloak

org.keycloak:keycloak-parent

Improper Certificate Validation and Improper Validation of Certificate with Host Mismatch in Keycloak

org.keycloak:keycloak-core, org.keycloak:keycloak-common

Improper Input Validation in Keycloak

github.com/keycloak/keycloak-gatekeeper

Keycloak Gatekeeper vulnerable to bypass on using lower case HTTP headers

io.undertow:undertow-core, io.undertow:undertow-core

Denial of service in Undertow

org.apache.hive:hive

Apache Hive Information Exposure and Observable Timing Discrepancy

org.apache.xmlgraphics:batik

Server-side request forgery (SSRF) in Apache Batik

org.apache.xmlgraphics:xmlgraphics-commons

Server-side request forgery (SSRF) in Apache XmlGraphics Commons

com.hubspot.jinjava:jinjava

Unauthorized access to Class instance in Jinjava

org.apache.nifi.registry:nifi-registry-web-api

Insufficient Session Expiration in Apache NiFi Registry

ansible, ansible, ansible

OS Command Injection in ansible

microweber/microweber

Cross-Site Request Forgery in microweber

microweber/microweber

Cross-site Scripting in microweber