Open Source Vulnerabilities

github.com/spiffe/spire, github.com/spiffe/spire

Unbounded memory usage on exposed HTTP/2 (non-gRPC) endpoints

pipenv

Pipenv's requirements.txt parsing allows malicious index url in comments

markdown-it

Uncontrolled Resource Consumption in markdown-it

flatpak, flatpak, flatpak

gpac

gpac

gpac

gpac

gpac

flatpak, flatpak, flatpak

gpac, gpac, gpac, gpac, gpac, gpac

gpac, gpac, gpac, gpac, gpac, gpac

gpac, gpac, gpac, gpac, gpac, gpac

gpac, gpac, gpac, gpac, gpac, gpac

gpac, gpac, gpac, gpac, gpac, gpac

@keystone-6/auth, @keystone-next/auth

Reflected cross-site scripting (XSS) vulnerability

oro/platform, oro/platform, oro/platform

XSS vulnerability in translations

@soketi/soketi

Zalgo-like output that crashes the server

gpac

fig2dev, fig2dev, fig2dev

fig2dev, fig2dev, fig2dev

fig2dev, fig2dev, fig2dev

fig2dev, fig2dev, fig2dev

gpac, gpac, gpac, gpac, gpac, gpac

linux-gcp-5.4, linux-hwe-5.4, linux, linux-gcp

linux, linux-gcp, linux-gcp-5.4, linux-hwe-5.4 regression