Open Source Vulnerabilities

radare2, radare2, radare2, radare2, radare2, radare2

ibsim

Security update for ibsim

kernel-rt, kernel-rt_debug, kernel-source-rt, kernel-syms-rt

Security update for the Linux Kernel

glibc

glibc vulnerabilities

assimp

Heap-buffer-overflow in std::__1::char_traits<char>::length

jetty9

jetty9 - security update

postgresql-9.3, postgresql-9.5, postgresql-10, postgresql-12

flask-caching, flask-caching, flask-caching

flask-caching, flask-caching, flask-caching

flask-caching

com.mikesamuel:json-sanitizer

Uncaught Exception leading to Denial of Service in json-sanitizer

org.mitre:openid-connect-parent

Autobinding vulnerability in MITREid Connect

com.adobe.acs:acs-aem-commons

Reflected Cross-site Scripting (XSS) in ACS Commons

org.apache.cxf:cxf, org.apache.cxf:cxf, org.apache.cxf:apache-cxf, org.apache.cxf:apache-cxf

Authorization service vulnerable to DDos attacks in Apache CFX

org.mitre:openid-connect-server

Server Side Request Forgery (SSRF) in org.mitre:openid-connect-server

org.apache.livy:livy-server

Apache Livy Cross-site scripting (XSS) in session names

org.apache.pdfbox:pdfbox

Uncontrolled Memory Allocation in Apache PDFBox

org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat.embed:tomcat-embed-core

Information Disclosure in Apache Tomcat

org.keycloak:keycloak-parent

Code injection in keycloak

pydantic, pydantic, pydantic

Use of "infinity" as an input to datetime and date fields causes infinite loop in pydantic