Open Source Vulnerabilities

sylius/paypal-plugin, sylius/paypal-plugin

Sylius PayPal Plugin allows unauthorized access to Credit card form, exposing payer name and not requiring 3DS

vyper

missing clamps for decimal args in external functions

com.sun.el:el-ri, org.glassfish:jakarta.el, org.glassfish:javax.el

Improper Input Validation in Jakarta Expression Language

ruby-jss

Remote code execution in ruby-jss

strapi

Weak Password Recovery Mechanism for Forgotten Password in Strapi

superset, apache-superset

Open Redirect in Apache Superset

mongo-express

Denial of Service (DoS) in mongo-express

github.com/foxcpp/maddy

S3 storage write is not aborted on errors leading to unbounded memory usage

sidekiq, sidekiq

Cross-site Scripting in Sidekiq

froala-editor

Cross-site Scripting in Froala Editor

buddypress/buddypress

BuddyPress privilege escalation via REST API

october/october, october/system

Deleted Admin Can Sign In to Admin Interface

scrapy, scrapy

Scrapy HTTP authentication credentials potentially leaked to target websites

go1.17, go1.17

Recommended update for go1.17

python-bottle, python-bottle

python-bottle vulnerability

,

libcryptopp

Security update for libcryptopp

libcryptopp, libcryptopp

Security update for libcryptopp

git

Security update for git

git, git

Security update for git

apache2, apache2, apache2, apache2, apache2, apache2, apache2, apache2, apache2, apache2, apache2, apache2, apache2, apache2

Security update for apache2