Open Source Vulnerabilities

github.com/beego/beego, github.com/astaxie/beego

Beego has a file creation race condition

github.com/hashicorp/vault, github.com/hashicorp/vault, github.com/hashicorp/vault, github.com/hashicorp/vault

Authentication Bypass by Spoofing and Insufficient Verification of Data Authenticity in Hashicorp Vault

net.opentsdb:opentsdb

OS Command Injection in OpenTSDB

com.graphhopper:graphhopper-web-bundle

Prototype Pollution in GraphHopper

org.owasp.antisamy:antisamy

Cross-site Scripting in OWASP AntiSamy

org.apache.ant:ant, org.apache.ant:ant

Improper Handling of Length Parameter Inconsistency in Apache Ant

org.apache.ant:ant, org.apache.ant:ant

Improper Handling of Length Parameter Inconsistency in Apache Ant

org.apache.commons:commons-compress

Improper Handling of Length Parameter Inconsistency in Compress

org.apache.commons:commons-compress

Improper Handling of Length Parameter Inconsistency in Compress

org.apache.commons:commons-compress

Improper Handling of Length Parameter Inconsistency in Compress

org.apache.commons:commons-compress

Excessive Iteration in Compress

org.apache.sshd:sshd-mina, org.apache.sshd:sshd-core

Buffer Overflow in Apache Mina SSHD

org.apereo.cas:cas-server-webapp, org.apereo.cas:cas-server-webapp, org.apereo.cas:cas-server-webapp, org.apereo.cas:cas-server-support-otp-mfa-core, org.apereo.cas:cas-server-support-otp-mfa-core, org.apereo.cas:cas-server-support-otp-mfa-core

Improper Authentication in Apereo CAS

com.alibaba.nacos:nacos-common

Incorrect Access Control in Nacos

exiv2, exiv2, exiv2

exiv2 vulnerability

varnish, varnish-modules

Important: varnish:6 security update

qpdf

qpdf vulnerabilities