Open Source Vulnerabilities

kernel, kmod-virtualbox, kmod-xtables-addons

Updated kernel packages fix security vulnerabilities

kernel-linus

Updated kernel-linus packages fix security vulnerabilities

ghostscript, ghostscript

linux-aws, linux-lts-xenial, linux, linux-aws, linux-kvm

linux, linux-aws, linux-kvm, linux-lts-xenial vulnerability

remark-html, remark-html

Unsafe defaults in `remark-html`

objection

objection.js Prototype Pollution vulnerability

k8s.io/kubernetes, k8s.io/kubernetes, k8s.io/kubernetes, k8s.io/kubernetes

Incomplete List of Disallowed Inputs in Kubernetes

file-upload-with-preview

Cross-site Scripting in file-upload-with-preview

com.charleskorn.kaml:kaml

Improper Handling of Missing Values in kaml

better_errors

Older releases of better_errors open to Cross-Site Request Forgery attack

pillow

Uncontrolled Resource Consumption in pillow

rebber

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in ZMarkdown

org.geysermc:connector

User impersonation due to incorrect handling of the login JWT

github.com/cloudflare/cfrpki

OctoRPKI lacks contextual out-of-bounds check when validating RPKI ROA maxLength values

parse-server, parse-server

Incorrect version tags linked to external repository

immer

Prototype Pollution in immer

org.apache.zeppelin:zeppelin

Authentication bypass in Apache Zeppelin

org.apache.zeppelin:zeppelin

Bash command injection in Apache Zeppelin

org.apache.zeppelin:zeppelin

Cross-site Scripting in Apache Zeppelin

ezsystems/ezpublish-legacy, ezsystems/ezpublish-legacy

Content object state fetch functions open to SQL injection