Open Source Vulnerabilities

proxy-py

Logic error in authentication in proxy.py

actionpack

Cross-site scripting in actionpack

phpseclib/phpseclib, phpseclib/phpseclib

Improper Certificate Validation in phpseclib

clickhouse-driver

Arbitrary code execution in clickhouse-driver

ansible, ansible, ansible

Code Injection, Race Condition, and Execution with Unnecessary Privileges in Ansible

ansible, ansible, ansible

Exposure of Resource to Wrong Sphere and Insecure Temporary File in Ansible

ansible, ansible, ansible

Path Traversal in Ansible

ansible, ansible, ansible

Insertion of Sensitive Information into Log File, Invocation of Process Using Visible Sensitive Information, and Exposure of Sensitive Information to an Unauthorized Actor in Ansible

ansible, ansible, ansible

Exposure of Sensitive Information to an Unauthorized Actor in Ansible

,

unity-firefox-extension

unity-firefox-extension

mosquitto, mosquitto, mosquitto, mosquitto, mosquitto, mosquitto, mosquitto, mosquitto, mosquitto, mosquitto, mosquitto

mosquitto, mosquitto, mosquitto

mosquitto

curl

curl vulnerability

openexr

Security update for openexr

kfreebsd-10

indico

isync

Security update for isync

gnuchess, gnuchess, gnuchess

file-roller, file-roller, file-roller

,

file-roller, file-roller, file-roller

gnuchess, gnuchess

libostree, flatpak, libostree, xdg-desktop-portal, xdg-desktop-portal-gtk

Security update for flatpak, libostree, xdg-desktop-portal, xdg-desktop-portal-gtk

metrics-util

AtomicBucket<T> unconditionally implements Send/Sync

sass-rs

`sass-rs` has been deprecated

libqb

libqb security update

libupnp

libupnp security update

rubygem-nokogiri

rubygem-nokogiri security update

rubygem-rails

rubygem-rails security update