Open Source Vulnerabilities

apollo-server, apollo-server

Cross-site Scripting Vulnerability in GraphQL Playground (distributed by Apollo Server)

graphql-playground-react

XSS vulnerability in GraphQL Playground from untrusted schemas

graphiql

GraphiQL introspection schema template injection attack

jupyterhub

incomplete JupyterHub logout with simultaneous JupyterLab sessions

coreos-installer

coreos-installer < 0.10.0 writes world-readable Ignition config to installed system

librenms/librenms

Cross-site Scripting in LibreNMS

dotty

Prototype Pollution in dotty

bootstrap-table

Cross-site Scripting in bootstrap-table

tempura

Cross-site Scripting in tempura

jsonpointer, org.webjars.npm:json-pointer

Prototype Pollution in node-jsonpointer

json-ptr

Prototype Pollution in json-ptr

json-pointer

Prototype Pollution in json-pointer

glibc, glibc-common, glibc-devel, glibc-headers, glibc-static, glibc-utils, nscd

Fixed CVEs in glibc: CVE-2021-43396, CVE-2021-3326

glibc-doc, glibc-source, libc-bin, libc-dev-bin, libc6, libc6-dev, libc6-dev-i386, libc6-dev-x32, libc6-i386, libc6-pic, libc6-x32, locales, locales-all, multiarch-support, nscd

Fix CVE(s): CVE-2021-3326, CVE-2021-43396

,

enrocrypt

chromium, chromium, chromium

Security update for chromium

nginx, nginx-all-modules, nginx-filesystem, nginx-mod-http-geoip, nginx-mod-http-image-filter, nginx-mod-http-perl, nginx-mod-http-xslt-filter, nginx-mod-mail, nginx-mod-stream

Fix of CVE: CVE-2017-20005

qemu, qemu-linux-user, qemu-testsuite

Security update for qemu

golang-1.15

golang

CVE-2021-41771 affecting package golang 1.26.7-1

golang

CVE-2021-41771 affecting package golang 1.27.1-1

golang

CVE-2021-41771 affecting package golang for versions less than 1.17.8-1

golang

CVE-2021-41772 affecting package golang for versions less than 1.17.8-1

golang-1.16, golang-1.8, golang-1.16, golang-1.17

golang-1.16, golang-1.8, golang-1.16, golang-1.17