Open Source Vulnerabilities

CVE-2021-28950 does not affect BellSoft software

CVE-2021-28951 does not affect BellSoft software

connman

Security update for connman

linux-oem-5.10

linux-oem-5.10 vulnerabilities

opensc

Heap-buffer-overflow in sc_pkcs15emu_oberthur_add_pubkey

cloud-init

cloud-init - security update

python-markdown2

Security update for python-markdown2

djangorestframework

Cross-site Scripting (XSS) in Django REST Framework

total.js

total.js Remote Code Execution Vulnerability

channels

Django Channels leakage of session identifiers using legacy AsgiHandler

jinja2

Regular Expression Denial of Service (ReDoS) in Jinja2

is-svg

Regular Expression Denial of Service (ReDoS)

ssri, ssri, ssri

Regular Expression Denial of Service (ReDoS)

printf

printf vulnerable to Regular Expression Denial of Service (ReDoS)

node-ps

Command injection in node-ps

kill-process-on-port

Command injection in kill-process-on-port

ps-kill

Command Injection in ps-kill

kill-process-by-name

Code injection in kill-process-by-name

object-collider

Prototype Pollution Vulnerability in object-collider

moodle, moodle

moodle, moodle

moodle, moodle

moodle, moodle

wc-cmd

Command injection in wc-cmd

set-in

Prototype pollution in set-in

schema-inspector

Regular Expression Denial-of-Service in npm schema-inspector

org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat.embed:tomcat-embed-core

Potential remote code execution in Apache Tomcat

ezsystems/ezpublish-kernel, ezsystems/ezpublish-kernel, ezsystems/ezplatform-kernel, ezsystems/ezplatform-kernel

Cross-site scripting in eZ Platform Kernel

urllib3

Using default SSLContext for HTTPS requests in an HTTPS proxy doesn't verify certificate hostname for proxy connection

froxlor

Security update for froxlor

Security Beta update for Salt

Security Beta update for Salt