Open Source Vulnerabilities

gdal

Heap-buffer-overflow in PCIDSK::CPCIDSKFile::ReadFromFile

runc

runc - security update

roundcube

roundcube - security update

kernel-linus

Updated kernel-linus packages fix security vulnerabilities

kernel, kmod-virtualbox, kmod-xtables-addons

Updated kernel packages fix security vulnerabilities

encoding

`encoding` is unmaintained

xen

xen - security update

singularity, singularity

Security update for singularity

openexr

Heap-buffer-overflow in uncompress_b44_impl

c-blosc2

UNKNOWN READ in ndlz4_decompress

open62541

UNKNOWN READ in UA_Server_initNS0

libarchive

Heap-buffer-overflow in archive_read_format_cpio_read_header

unicorn

UNKNOWN WRITE in cpu_arm_exec_arm

matyhtf/framework

Path manipulation in matyhtf/framework

libjxl

Container-overflow in void jxl::CopyImageTo<int>

nomad, nomad

github.com/hyperledger/fabric

HTTP Request Smuggling in github.com/hyperledger/fabric

librenms/librenms

Cross-site Scripting in LibreNMS

librenms/librenms

Cross-site Scripting in LibreNMS

ckan

Cross-site Scripting in CKAN

elgg/elgg

elgg is vulnerable to Authorization Bypass Through User-Controlled Key

kevinpapst/kimai2

Cross-site Scripting in kimai2

kevinpapst/kimai2

kimai2 is vulnerable to Improper Access Control

showdoc/showdoc

showdoc is vulnerable to Cross-Site Request Forgery (CSRF)

django-helpdesk

django-helpdesk is vulnerable to Cross-site Scripting

showdoc/showdoc

showdoc is vulnerable to URL Redirection to Untrusted Site

snipe/snipe-it

snipe-it is vulnerable to Cross-site Scripting