Open Source Vulnerabilities

simpl-schema

Prototype Pollution in simpl-schema

node-pdf-generator

Server-Side Request Forgery in node-pdf-generator

phantomjs-seo

Server-Side Request Forgery in phantomjs-seo

socket.io-file

Duplicate Advisory: "Arbitrary code execution in socket.io-file"

json-pointer, org.webjars.npm:json-pointer

Prototype pollution in json-pointer

shiba

Arbitrary Code Execution in shiba

bmoor

Prototype Pollution in bmoor

pomelo-monitor

OS Command Injection in pomelo-monitor

exiv2, exiv2, exiv2

exiv2 vulnerabilities

systemd, systemd, systemd

,

systemd, systemd, systemd, systemd

geojson2kml

Command Injection in geojson2kml

tiny-conf

Prototype Pollution in tiny-conf

get-git-data

Command injection in get-git-data

quill

Cross-site Scripting in quill

@theia/messages

Command Injection in @theia/messages

swiper

Prototype Pollution in swiper

postcss, postcss

Regular Expression Denial of Service in postcss

org.apache.tika:tika

Infinite loop in Apache Tika

org.springframework.security:spring-security-bom, org.springframework.security:spring-security-bom, org.springframework.security:spring-security-bom, org.springframework.security:spring-security-web, org.springframework.security:spring-security-web, org.springframework.security:spring-security-web

Privilege escalation in spring security

com.atlassian.connect:atlassian-connect-spring-boot-starter

Broken Authentication in Atlassian Connect Spring Boot

org.springframework.cloud:spring-cloud-netflix-zuul

Incorrect Authorization in Spring Cloud Netflix Zuul

org.apache.solr:solr-core

Improper permission handling in Apache Solr

org.apache.solr:solr-parent

Server-Side Request Forgery in Apache Solr

org.apache.solr:solr-parent

Incorrect Authorization in Apache Solr

com.typesafe.akka:akka-http-core, com.typesafe.akka:akka-http-core

HTTP Request Smuggling in akka-http-core

bundler

Insecure path handling in Bundler

pyyaml

pyyaml vulnerability

cyrus-imapd, cyrus-imapd, cyrus-imapd

cyrus-imapd, cyrus-imapd