Open Source Vulnerabilities

poppler-cpp, poppler-cpp-devel, poppler-devel, poppler-glib-devel, poppler-qt5, poppler-qt5-devel

poppler bug fix and enhancement update

libdb, libdb-cxx, libdb-cxx-devel, libdb-devel, libdb-devel-doc, libdb-sql, libdb-sql-devel, libdb-utils

libdb bug fix and enhancement update

gcc-toolset-10-elfutils, gcc-toolset-10-elfutils-debuginfod-client, gcc-toolset-10-elfutils-debuginfod-client-devel, gcc-toolset-10-elfutils-devel, gcc-toolset-10-elfutils-libelf, gcc-toolset-10-elfutils-libelf-devel, gcc-toolset-10-elfutils-libs

gcc-toolset-10-elfutils bug fix update

mecab, mecab, mecab-ipadic, mecab-ipadic, mecab-ipadic-EUCJP, mecab-ipadic-EUCJP, mysql, mysql, mysql-common, mysql-common, mysql-devel, mysql-devel, mysql-errmsg, mysql-errmsg, mysql-libs, mysql-libs, mysql-server, mysql-server, mysql-test, mysql-test

Moderate: mysql:8.0 security, bug fix, and enhancement update

mecab, mecab-ipadic, mysql

Moderate: mysql:8.0 security, bug fix, and enhancement update

pcp, pcp-conf, pcp-libs, pcp-pmda-rpm, pcp-selinux

pcp bug fix and enhancement update

opencryptoki-devel

opencryptoki bug fix and enhancement update

delve, golang, go-toolset

Moderate: go-toolset:rhel8 security update

curl

Moderate: curl security update

resource-agents, resource-agents-aliyun, resource-agents-gcp

resource-agents bug fix and enhancement update

pacemaker, pacemaker-cli, pacemaker-cts, pacemaker-doc, pacemaker-libs-devel, pacemaker-nagios-plugins-metadata, pacemaker-remote

pacemaker bug fix and enhancement update

krb5

Moderate: krb5 security update

gcc-toolset-10-binutils, gcc-toolset-10-binutils-devel

gcc-toolset-10-binutils bug fix update

ca-certificates

ca-certificates bug fix and enhancement update

nspr, nspr-devel, nss, nss-devel, nss-softokn, nss-softokn-devel, nss-softokn-freebl, nss-softokn-freebl-devel, nss-sysinit, nss-tools, nss-util, nss-util-devel

Moderate: nss and nspr security, bug fix, and enhancement update

nspr, nss

Moderate: nss and nspr security, bug fix, and enhancement update

grok

Heap-buffer-overflow in openhtj2k::T1OpenHTJ2K::decompress

libredwg

Heap-buffer-overflow in get_next_owned_entity

mruby

Heap-buffer-overflow in mrb_vm_exec

jsoup

Uncaught exception in org.jsoup.parser.HtmlTreeBuilder.process

ros-ros-comm, ros-ros-comm, ros-ros-comm, ros-ros-comm

com.jsoniter:jsoniter

Deserialization of Untrusted Data in com.jsoniter:jsoniter

org.apache.santuario:xmlsec, org.apache.santuario:xmlsec

Exposure of Sensitive Information to an Unauthorized Actor in Apache Santuario

apprise

apprise

Apprise vulnerable to regex injection with IFTTT Plugin

nth-check

Inefficient Regular Expression Complexity in nth-check

object-path

Prototype Pollution in object-path

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Infinite loop in Tomcat due to parsing error

feehi/cms

Arbitrary Code Execution in feehi/cms

com.bstek.ureport:ureport2-console

Server-Side Request Forgery in UReport

com.bstek.ureport:ureport2-core

Remote code execution in UReport

prismjs

prismjs Regular Expression Denial of Service vulnerability

org.keycloak:keycloak-core

Exposure of Sensitive Information in keycloak

yourls/yourls

Cross-site Scripting in yourls

yourls/yourls

Cross-site Scripting in yourls

peertube

Cross-site Scripting in peertube

semver-regex, semver-regex

semver-regex Regular Expression Denial of Service (ReDOS)

@vuelidate/validators

Inefficient Regular Expression Complexity in vuelidate

org.elasticsearch:elasticsearch

Exposure of sensitive information in Elasticsearch

tmpl

tmpl vulnerable to Inefficient Regular Expression Complexity which may lead to resource exhaustion

org.apache.jena:jena-core

XML External Entity Reference in Apache Jena

ansi-regex, ansi-regex, ansi-regex, ansi-regex

Inefficient Regular Expression Complexity in chalk/ansi-regex