Open Source Vulnerabilities

plone

Server-Side Request Forgery in Plone

plone

Server-Side Request Forgery in Plone

plone

Incorrect Permission Assignment for Critical Resource in Plone

zope, zope

Duplicate Advisory: Path Traversal in Zope

ansible

Insufficiently random values in Ansible

go.mongodb.org/mongo-driver

go.mongodb.org/mongo-driver improperly validates cstrings when marshalling Go objects into BSON

org.jboss.resteasy:resteasy-bom, org.jboss.resteasy:resteasy-bom, org.jboss.resteasy:resteasy-core, org.jboss.resteasy:resteasy-core

Cross-site scripting in RESTEasy

org.jboss.resteasy:resteasy-bom, org.jboss.resteasy:resteasy-core

Cross-Site Scripting

flask-unchained

Open redirect in Flask-Unchained

org.apache.pdfbox:pdfbox, org.apache.pdfbox:pdfbox-parent

Uncontrolled memory consumption

org.apache.pdfbox:pdfbox, org.apache.pdfbox:pdfbox-parent

Infinite Loop in Apache PDFBox

studio-42/elfinder

elFinder unsafe upload filtering leading to remote code execution

thefuck

The Fuck Arbitrary File Deletion via Path Traversal

imagemagick, imagemagick

imagemagick vulnerabilities

java-1_8_0-openjdk, java-1_8_0-openjdk, java-1_8_0-openjdk, java-1_8_0-openjdk, java-1_8_0-openjdk, java-1_8_0-openjdk, java-1_8_0-openjdk, java-1_8_0-openjdk, java-1_8_0-openjdk, java-1_8_0-openjdk, java-1_8_0-openjdk, java-1_8_0-openjdk, java-1_8_0-openjdk

Security update for java-1_8_0-openjdk

snakeyaml

Security update for snakeyaml

snakeyaml

Security update for snakeyaml

kernel-64kb, kernel-default, kernel-default-base, kernel-preempt, kernel-source, kernel-zfcpdump, kernel-docs, kernel-obs-build, kernel-preempt, kernel-source, kernel-syms, kernel-default, kernel-default, kernel-livepatch-SLE15-SP3_Update_1, kernel-default, kernel-default, kernel-preempt

Security update for the Linux Kernel

xorg-x11-libX11, xorg-x11-libX11

Security update for xorg-x11-libX11

kernel-azure, kernel-source-azure, kernel-syms-azure

Security update for the Linux Kernel

apache2, apache2, apache2

apache2, apache2, apache2, apache2, apache2, apache2, apache2, apache2, apache2, apache2, apache2, apache2, apache2, apache2, apache2

mod_http2

CVE-2021-31618 affecting package mod_http2 for versions less than 2.0.29-3

libjxl

Use-of-uninitialized-value in jxl::N_AVX2::FloatToRGBA8

zstd

Heap-buffer-overflow in FSE_writeNCount_generic

libjxl

Use-of-uninitialized-value in jxl::N_SCALAR::Epf0Row

xen

xen - security update

prosody

prosody - security update

python-urllib3

python-urllib3 - security update

openexr, openexr, openexr