Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    GHSA-hmv2-79q8-fv6g
    Fix available
    Packages

    urllib3

    Summary

    Uncontrolled Resource Consumption in urllib3

    Published
    30 Apr 2021
    GHSA-8cr8-4vfw-mr7h
    Fix available
    Packages

    rexml

    Summary

    REXML round-trip instability

    Published
    30 Apr 2021
    GHSA-qgp4-5qx6-548g
    Fix available
    Packages

    getkirby/cms

    Summary

    Cross-site scripting (XSS) from unsanitized uploaded SVG files in Kirby

    Published
    30 Apr 2021
    GHSA-rv39-3qh7-9v7w
    Fix available
    Packages

    org.springframework:spring-framework-bom, org.springframework:spring-framework-bom, org.springframework:spring-framework-bom, org.springframework:spring-framework-bom

    Summary

    Improper Input Validation in Spring Framework

    Published
    30 Apr 2021
    GHSA-qgcg-p3v2-9h4p
    Fix available
    Packages

    org.springframework.cloud:spring-cloud-netflix, org.springframework.cloud:spring-cloud-netflix

    Summary

    Externally Controlled Reference to a Resource in Another Sphere and Confused Deputy in Spring Cloud Netflix

    Published
    30 Apr 2021
    GHSA-rhh9-cm65-3w54
    Fix available
    Packages

    org.apache.hadoop:hadoop-main, org.apache.hadoop:hadoop-main, org.apache.hadoop:hadoop-main

    Summary

    Improper Authentication in Apache Hadoop

    Published
    30 Apr 2021
    GHSA-78vq-9j56-wrfr
    Fix available
    Packages

    gon

    Summary

    Gon gem lack of escaping certain input when outputting as JSON

    Published
    30 Apr 2021
    GHSA-p9w3-gwc2-cr49
    Fix available
    Packages

    io.undertow:undertow-core

    Summary

    HTTP Request Smuggling in Undertow

    Published
    30 Apr 2021
    GHSA-g4cp-h53p-v3v8
    Fix available
    Packages

    io.undertow:undertow-core

    Summary

    Allocation of Resources Without Limits or Throttling in Undertow

    Published
    30 Apr 2021
    GHSA-cccf-7xw3-p2vr
    Fix available
    Packages

    io.undertow:undertow-core

    Summary

    HTTP Request Smuggling in Undertow

    Published
    30 Apr 2021
    GHSA-rfw2-x9f8-2f6m
    Fix available
    Packages

    oncall

    Summary

    LinkedIn Oncall vulnerable to Cross-Site Scripting

    Published
    30 Apr 2021
    CVE-2021-20515
    No fix available
    Packages

    Summary

    Published
    30 Apr 2021
    CVE-2020-7731
    Fix available
    Packages

    Summary

    Published
    30 Apr 2021
    CVE-2020-4039
    No fix available
    Packages

    Summary

    Published
    30 Apr 2021
    CVE-2020-15153
    Fix available
    Packages

    Summary

    Published
    30 Apr 2021
    UBUNTU-CVE-2020-15153
    No fix available
    Packages

    ampache

    Summary

    Published
    30 Apr 2021
    GHSA-73xv-w5gp-frxh
    Fix available
    Packages

    org.bouncycastle:bcprov-jdk15to18, org.bouncycastle:bcprov-jdk15, org.bouncycastle:bcprov-jdk15on, org.bouncycastle:bcprov-ext-jdk15on, org.bouncycastle:bcprov-jdk14, org.bouncycastle:bcprov-jdk16, org.bouncycastle:bcprov-ext-jdk16

    Summary

    Logic error in Legion of the Bouncy Castle BC Java

    Published
    30 Apr 2021
    CVE-2020-27519
    Fix available
    Packages

    Summary

    Published
    30 Apr 2021
    CVE-2021-31232
    Fix available
    Packages

    Summary

    Published
    30 Apr 2021
    CVE-2021-31231
    No fix available
    Packages

    Summary

    Published
    30 Apr 2021
    CVE-2021-28959
    No fix available
    Packages

    Summary

    Published
    30 Apr 2021
    CVE-2021-20266
    Fix available
    Packages

    Summary

    Published
    30 Apr 2021
    Packages

    rpm, rpm, rpm

    Summary

    Published
    30 Apr 2021
    CVE-2020-24918
    No fix available
    Packages

    Summary

    Published
    30 Apr 2021
    CVE-2020-1721
    No fix available
    Packages

    Summary

    Published
    30 Apr 2021
    Packages

    dogtag-pki

    Summary

    Published
    30 Apr 2021
    Packages

    rpm, rpm

    Summary

    Published
    30 Apr 2021
    UBUNTU-CVE-2020-1721
    No fix available
    Packages

    dogtag-pki, dogtag-pki, dogtag-pki, dogtag-pki

    Summary

    Published
    30 Apr 2021
    SUSE-SU-2021:1460-1
    Fix available
    Packages

    xen, xen, xen, xen, xen, xen, xen, xen, xen

    Summary

    Security update for xen

    Published
    30 Apr 2021
    CVE-2021-26807
    No fix available
    Packages

    Summary

    Published
    30 Apr 2021
    SUSE-SU-2021:1458-1
    Fix available
    Packages

    containerd, docker, runc

    Summary

    Security update for containerd, docker, runc

    Published
    30 Apr 2021
    SUSE-SU-2021:1455-1
    Fix available
    Packages

    cifs-utils, cifs-utils, cifs-utils, cifs-utils

    Summary

    Security update for cifs-utils

    Published
    30 Apr 2021
    CVE-2021-20326
    Fix available
    Packages

    Summary

    Published
    30 Apr 2021
    UBUNTU-CVE-2021-20326
    No fix available
    Packages

    mongodb, mongodb, mongodb, mongodb

    Summary

    Published
    30 Apr 2021
    SUSE-SU-2021:1454-1
    Fix available
    Packages

    cups, cups, cups, cups, cups, cups, cups, cups, cups, cups, cups, cups, cups, cups, cups

    Summary

    Security update for cups

    Published
    30 Apr 2021
    SUSE-SU-2021:1453-1
    Fix available
    Packages

    cups, cups, cups, cups, cups, cups, cups, cups, cups, cups, cups, cups, cups, cups

    Summary

    Security update for cups

    Published
    30 Apr 2021
    Packages

    cups, cups

    Summary

    Security update for cups

    Published
    30 Apr 2021
    CVE-2021-31873
    Fix available
    Packages

    Summary

    Published
    30 Apr 2021
    Packages

    klibc, klibc, klibc

    Summary

    Published
    30 Apr 2021
    CVE-2021-31872
    No fix available
    Packages

    Summary

    Published
    30 Apr 2021
    Packages

    klibc, klibc, klibc

    Summary

    Published
    30 Apr 2021
    CVE-2021-31871
    No fix available
    Packages

    Summary

    Published
    30 Apr 2021
    Packages

    klibc, klibc, klibc

    Summary

    Published
    30 Apr 2021
    CVE-2021-31870
    No fix available
    Packages

    Summary

    Published
    30 Apr 2021
    Packages

    klibc, klibc, klibc

    Summary

    Published
    30 Apr 2021
    Packages

    klibc, klibc, klibc, klibc

    Summary

    Published
    30 Apr 2021
    Packages

    klibc, klibc, klibc, klibc

    Summary

    Published
    30 Apr 2021
    Packages

    klibc, klibc, klibc, klibc

    Summary

    Published
    30 Apr 2021
    Packages

    klibc, klibc, klibc, klibc

    Summary

    Published
    30 Apr 2021
    CVE-2021-31919
    Fix available
    Packages

    Summary

    Published
    30 Apr 2021