Open Source Vulnerabilities

shopware/platform, shopware/core

Private files publicly accessible with Cloud Storage providers

postsrsd, postsrsd, postsrsd

postsrsd, postsrsd, postsrsd, postsrsd, postsrsd, postsrsd, postsrsd

mongo-express

Cross-site scripting

tenvoy

Improper Verification of Cryptographic Signature

python-requests, python-urllib3, python-requests, python-urllib3, python-requests, python-urllib3

Security update for python-urllib3, python-requests

aws-cli, python-PyYAML, python-botocore, python-colorama, python-pexpect, python-ptyprocess, python-six, python-urllib3, python3-requests, python-PyYAML, python-colorama, python-configparser, python-pexpect, python-ptyprocess, python-scandir, python-websocket-client, aws-cli, python-PyYAML, python-botocore, python-colorama, python-pexpect, python-ptyprocess, python-six, python-urllib3, python3-requests, python-urllib3, python3-requests, aws-cli, python-PyYAML, python-botocore, python-colorama, python-pexpect, python-ptyprocess, python-six, python-urllib3, python3-requests, python-urllib3, python3-requests, python-pexpect, python-ptyprocess, python-pexpect, python-ptyprocess, python-pexpect, python-ptyprocess, python-requests, aws-cli, azure-cli, azure-cli-command-modules-nspkg, azure-cli-core, azure-cli-nspkg, azure-cli-telemetry, azure-cli-test, libsodium, python-Fabric, python-PyNaCl, python-PyYAML, python-Pygments, python-adal, python-antlr4-python3-runtime, python-applicationinsights, python-atomicwrites, python-attrs, python-azure-ai-anomalydetector, python-azure-ai-metricsadvisor, python-azure-ai-nspkg, python-azure-ai-textanalytics, python-azure-appconfiguration, python-azure-applicationinsights, python-azure-batch, python-azure-cognitiveservices-anomalydetector, python-azure-cognitiveservices-formrecognizer, python-azure-cognitiveservices-inkrecognizer, python-azure-cognitiveservices-knowledge-nspkg, python-azure-cognitiveservices-knowledge-qnamaker, python-azure-cognitiveservices-language-luis, python-azure-cognitiveservices-language-nspkg, python-azure-cognitiveservices-language-spellcheck, python-azure-cognitiveservices-language-textanalytics, python-azure-cognitiveservices-nspkg, python-azure-cognitiveservices-personalizer, python-azure-cognitiveservices-search-autosuggest, python-azure-cognitiveservices-search-customimagesearch, python-azure-cognitiveservices-search-customsearch, python-azure-cognitiveservices-search-entitysearch, python-azure-cognitiveservices-search-imagesearch, python-azure-cognitiveservices-search-newssearch, python-azure-cognitiveservices-search-nspkg, python-azure-cognitiveservices-search-videosearch, python-azure-cognitiveservices-search-visualsearch, python-azure-cognitiveservices-search-websearch, python-azure-cognitiveservices-vision-computervision, python-azure-cognitiveservices-vision-contentmoderator, python-azure-cognitiveservices-vision-customvision, python-azure-cognitiveservices-vision-face, python-azure-cognitiveservices-vision-nspkg, python-azure-common, python-azure-communication-administration, python-azure-communication-chat, python-azure-communication-nspkg, python-azure-communication-sms, python-azure-core, python-azure-cosmos, python-azure-data-nspkg, python-azure-data-tables, python-azure-datalake-store, python-azure-devops, python-azure-eventgrid, python-azure-eventhub, python-azure-eventhub-checkpointstoreblob, python-azure-functions-devops-build, python-azure-graphrbac, python-azure-identity, python-azure-keyvault, python-azure-keyvault-administration, python-azure-keyvault-certificates, python-azure-keyvault-keys, python-azure-keyvault-nspkg, python-azure-keyvault-secrets, python-azure-loganalytics, python-azure-mgmt, python-azure-mgmt-advisor, python-azure-mgmt-alertsmanagement, python-azure-mgmt-apimanagement, python-azure-mgmt-appconfiguration, python-azure-mgmt-applicationinsights, python-azure-mgmt-appplatform, python-azure-mgmt-attestation, python-azure-mgmt-authorization, python-azure-mgmt-automanage, python-azure-mgmt-automation, python-azure-mgmt-azurestack, python-azure-mgmt-azurestackhci, python-azure-mgmt-baremetalinfrastructure, python-azure-mgmt-batch, python-azure-mgmt-batchai, python-azure-mgmt-billing, python-azure-mgmt-botservice, python-azure-mgmt-cdn, python-azure-mgmt-cognitiveservices, python-azure-mgmt-commerce, python-azure-mgmt-communication, python-azure-mgmt-compute, python-azure-mgmt-consumption, python-azure-mgmt-containerinstance, python-azure-mgmt-containerregistry, python-azure-mgmt-containerservice, python-azure-mgmt-core, python-azure-mgmt-cosmosdb, python-azure-mgmt-costmanagement, python-azure-mgmt-databoxedge, python-azure-mgmt-databricks, python-azure-mgmt-datafactory, python-azure-mgmt-datalake-analytics, python-azure-mgmt-datalake-nspkg, python-azure-mgmt-datalake-store, python-azure-mgmt-datamigration, python-azure-mgmt-datashare, python-azure-mgmt-deploymentmanager, python-azure-mgmt-devspaces, python-azure-mgmt-devtestlabs, python-azure-mgmt-dns, python-azure-mgmt-documentdb, python-azure-mgmt-edgegateway, python-azure-mgmt-eventgrid, python-azure-mgmt-eventhub, python-azure-mgmt-frontdoor, python-azure-mgmt-hanaonazure, python-azure-mgmt-hdinsight, python-azure-mgmt-healthcareapis, python-azure-mgmt-hybridcompute, python-azure-mgmt-imagebuilder, python-azure-mgmt-iotcentral, python-azure-mgmt-iothub, python-azure-mgmt-iothubprovisioningservices, python-azure-mgmt-keyvault, python-azure-mgmt-kubernetesconfiguration, python-azure-mgmt-kusto, python-azure-mgmt-labservices, python-azure-mgmt-loganalytics, python-azure-mgmt-logic, python-azure-mgmt-machinelearningcompute, python-azure-mgmt-machinelearningservices, python-azure-mgmt-managedservices, python-azure-mgmt-managementgroups, python-azure-mgmt-managementpartner, python-azure-mgmt-maps, python-azure-mgmt-marketplaceordering, python-azure-mgmt-media, python-azure-mgmt-mixedreality, python-azure-mgmt-monitor, python-azure-mgmt-msi, python-azure-mgmt-netapp, python-azure-mgmt-network, python-azure-mgmt-notificationhubs, python-azure-mgmt-nspkg, python-azure-mgmt-peering, python-azure-mgmt-policyinsights, python-azure-mgmt-powerbiembedded, python-azure-mgmt-privatedns, python-azure-mgmt-rdbms, python-azure-mgmt-recoveryservices, python-azure-mgmt-recoveryservicesbackup, python-azure-mgmt-redhatopenshift, python-azure-mgmt-redis, python-azure-mgmt-regionmove, python-azure-mgmt-relay, python-azure-mgmt-reservations, python-azure-mgmt-resource, python-azure-mgmt-resourcegraph, python-azure-mgmt-resourcemover, python-azure-mgmt-scheduler, python-azure-mgmt-search, python-azure-mgmt-security, python-azure-mgmt-serialconsole, python-azure-mgmt-servermanager, python-azure-mgmt-servicebus, python-azure-mgmt-servicefabric, python-azure-mgmt-signalr, python-azure-mgmt-sql, python-azure-mgmt-sqlvirtualmachine, python-azure-mgmt-storage, python-azure-mgmt-storagecache, python-azure-mgmt-storageimportexport, python-azure-mgmt-storagesync, python-azure-mgmt-streamanalytics, python-azure-mgmt-subscription, python-azure-mgmt-synapse, python-azure-mgmt-trafficmanager, python-azure-mgmt-vmwarecloudsimple, python-azure-mgmt-web, python-azure-monitor, python-azure-multiapi-storage, python-azure-nspkg, python-azure-sdk, python-azure-search-documents, python-azure-search-nspkg, python-azure-servicebus, python-azure-servicefabric, python-azure-servicemanagement-legacy, python-azure-storage-blob, python-azure-storage-common, python-azure-storage-file, python-azure-storage-file-datalake, python-azure-storage-file-share, python-azure-storage-nspkg, python-azure-storage-queue, python-azure-synapse-accesscontrol, python-azure-synapse-artifacts, python-azure-synapse-nspkg, python-azure-synapse-spark, python-bcrypt, python-boto3, python-botocore, python-brotlipy, python-colorama, python-configparser, python-contextlib2, python-fluidity-sm, python-importlib-metadata, python-importlib_resources, python-invoke, python-javaproperties, python-jsmin, python-jsondiff, python-knack, python-lexicon, python-more-itertools, python-msal, python-msal-extensions, python-msrest, python-msrestazure, python-multidict, python-nose, python-paramiko, python-pathlib2, python-pexpect, python-pkginfo, python-pluggy, python-portalocker, python-ptyprocess, python-pydocumentdb, python-pyfakefs, python-pytest, python-pytest-mock, python-pytest-relaxed, python-pytz, python-requests, python-scandir, python-scp, python-six, python-spec, python-uamqp, python-urllib3, python-vcrpy, python-vsts, python-websocket-client, python-wrapt, python-xmltodict, python-yarl, python-zipp, libsodium, python-six, python-urllib3, python3-requests, python-urllib3, python3-requests, python-urllib3, python3-requests, python-six, python-urllib3, python3-requests, python-six, python-urllib3, python3-requests, python-six, python-urllib3, python3-requests, python-urllib3, python3-requests, python-requests, python-urllib3, python3-requests, python-requests, python-urllib3, python3-requests, python-pexpect, python-ptyprocess, python-urllib3, python3-requests

Recommended update for the Azure and AWS SDKs

shopware/platform, shopware/core

Creation of order credits was not validated by acl in admin orders

shopware/platform, shopware/core

Canceling of orders not related to the logged-in user

com.vaadin:vaadin-bom, com.vaadin:vaadin-bom

Reflected cross-site scripting in development mode handler in Vaadin 14, 15-19

com.vaadin:vaadin-bom, com.vaadin:vaadin-bom, com.vaadin:vaadin-bom

Possible route enumeration in production mode via RouteNotFoundError view in Vaadin 10, 11-14, and 15-19

com.vaadin:flow-server, com.vaadin:flow-server

Reflected cross-site scripting in development mode handler in Vaadin

@auth0/nextjs-auth0

Reflected XSS from the callback handler's error query parameter

com.epam.reportportal:service-api, com.epam.reportportal:service-api

XXE vulnerability in Launch import

com.epam.reportportal:service-api

XXE vulnerability on Launch import with externally-defined DTD file

go1.16

Security update for go1.16

go1.16, go1.16

Security update for go1.16

kernel-64kb, kernel-debug, kernel-default, kernel-default-base, kernel-docs, kernel-kvmsmall, kernel-obs-build, kernel-obs-qa, kernel-preempt, kernel-source, kernel-syms, kernel-zfcpdump

Security update for the Linux Kernel

kernel-64kb, kernel-default, kernel-default-base, kernel-preempt, kernel-source, kernel-zfcpdump, kernel-docs, kernel-obs-build, kernel-preempt, kernel-source, kernel-syms, kernel-default, kernel-default, kernel-livepatch-SLE15-SP3_Update_2, kernel-default, kernel-default, kernel-preempt

Security update for the Linux Kernel

rabbitmq-server, rabbitmq-server, rabbitmq-server

rabbitmq-server

libsolv, libzypp, libsolv, libzypp, libsolv, libzypp, libsolv, libzypp, libsolv, libzypp, libsolv, libzypp, libsolv, libzypp, libsolv, libzypp, libsolv, libzypp, libsolv, libzypp, libsolv, libzypp, libsolv, libzypp, libsolv, libzypp

Security update for libsolv

rabbitmq-server, rabbitmq-server, rabbitmq-server

rabbitmq-server

,