Open Source Vulnerabilities

gulp-styledocco

OS Command Injection in gulkp-styledocco

docker-compose-remote-api

OS Command Injection in docker-compose-remote-api

marked-tree

Path Traversal in marked-tree

google-closure-library

Improper Input Validation in Google Closure Library

ps-visitor

Command Injection in ps-visitor

onion-oled-js

Command Injection in onion-oled-js

picotts

Command Injection in picotts

marscode

Path Traversal in marscode

canvas

Buffer overflow in canvas

bson

Deserialization of Untrusted Data in bson

servey

Path traversal in servey

com.liferay.portal:release.portal.bom

Open Redirect in Liferay Portal

org.apache.cassandra:cassandra-all, org.apache.cassandra:cassandra-all, org.apache.cassandra:cassandra-all, org.apache.cassandra:cassandra-all, org.apache.cassandra:cassandra-all

Man-in-the-middle attack in Apache Cassandra

net.sf.mpxj:mpxj

Improper Restriction of XML External Entity Reference in MPXJ

com.netflix.spinnaker.orca:orca-core

Server-Side Request Forgery in Spinnaker Orca

org.apache.shiro:shiro-core

Authentication bypass in Apache Shiro

org.apache.wicket:wicket-core, org.apache.wicket:wicket-core, org.apache.wicket:wicket-core, org.apache.wicket:wicket-core, org.apache.wicket:wicket-core, org.apache.wicket:wicket-core, org.apache.wicket:wicket-core

Exposure of Sensitive Information to an Unauthorized Actor in Apache Wicket

org.apache.tika:tika

Infinite Loop in Apache Tika

org.apache.tika:tika

Uncontrolled Resource Consumption in Apache Tika

org.apache.tika:tika

Missing Release of Memory after Effective Lifetime in Apache Tika

org.apache.skywalking:oap-server

SQL Injection in Apache SkyWalking

org.apache.shiro:shiro-core

Improper Authentication in Apache Shiro

org.apache.shiro:shiro-core

Improper Authentication in Apache Shiro

org.odata4j:odata4j-core, org.odata4j:odata4j-dist, org.odata4j:odata4j-parent

SQL Injection in odata4j

org.odata4j:odata4j-core, org.odata4j:odata4j-dist, org.odata4j:odata4j-parent

SQL Injection in odata4j

eventlet

Improper Handling of Highly Compressed Data (Data Amplification) and Memory Allocation with Excessive Size Value in eventlet

sabnzbdplus, sabnzbdplus, sabnzbdplus

python-eventlet, python-eventlet, python-eventlet

eventlet

sabnzbdplus, sabnzbdplus, sabnzbdplus, sabnzbdplus

python-eventlet

avahi, avahi, avahi

avahi, avahi, avahi, avahi, avahi, avahi, avahi

avahi

CVE-2021-3502 affecting package avahi for versions less than 0.8-1

avahi

anymap

anymap is unmaintained.