Open Source Vulnerabilities

python-django, python-django, python-django

libao

Updated libao packages fix security vulnerability

dcraw

Updated dcraw packages fix security vulnerability

aubio

Updated aubio packages fix security vulnerabilities

python-django

python-django - security update

wget

Updated wget packages fix security vulnerability

libpgf

Updated libpgf packages fix security vulnerability

libextractor

Updated libextractor packages fix security vulnerabilities

freerdp

Updated freerdp packages fix security vulnerabilities

tdb, talloc, tevent, ldb, cmocka, sssd, samba

Updated ldb, talloc, and samba packages fix security vulnerabilities

php-phpmailer

Updated php-phpmailer package fixes security vulnerability

pdns

Updated pdns packages fix security vulnerabilities

units

Updated units package fixes security vulnerability

imagemagick

Updated imagemagick packages fix security vulnerabilities & bugs

plexus-archiver

Updated plexus-archiver packages fix security vulnerability

openjpeg2

Updated openjpeg2 packages fix security vulnerabilities

libgxps

Updated libgxps packages fix security vulnerabilities

xmlrpc

Updated xmlrpc packages fix security vulnerabilities

apache-commons-compress

Updated pache-commons-compress packages fix security vulnerabilities

pdns-recursor

Updated pdns-recursor packages fix security vulnerabilities

com.fasterxml.jackson.core:jackson-databind, com.fasterxml.jackson.core:jackson-databind, com.fasterxml.jackson.core:jackson-databind

Arbitrary Code Execution in jackson-databind

com.fasterxml.jackson.core:jackson-databind, com.fasterxml.jackson.core:jackson-databind, com.fasterxml.jackson.core:jackson-databind

XML External Entity Reference (XXE) in jackson-databind

com.fasterxml.jackson.core:jackson-databind, com.fasterxml.jackson.core:jackson-databind, com.fasterxml.jackson.core:jackson-databind

Server-Side Request Forgery (SSRF) in jackson-databind

com.fasterxml.jackson.core:jackson-databind, com.fasterxml.jackson.core:jackson-databind, com.fasterxml.jackson.core:jackson-databind, com.fasterxml.jackson.core:jackson-databind

com.fasterxml.jackson.core:jackson-databind vulnerable to Deserialization of Untrusted Data

com.fasterxml.jackson.core:jackson-databind, com.fasterxml.jackson.core:jackson-databind, com.fasterxml.jackson.core:jackson-databind

Deserialization of Untrusted Data in jackson-databind

com.fasterxml.jackson.core:jackson-databind, com.fasterxml.jackson.core:jackson-databind, com.fasterxml.jackson.core:jackson-databind

Deserialization of Untrusted Data in jackson-databind due to polymorphic deserialization

com.fasterxml.jackson.core:jackson-databind, com.fasterxml.jackson.core:jackson-databind, com.fasterxml.jackson.core:jackson-databind, com.fasterxml.jackson.core:jackson-databind

Arbitrary Code Execution in jackson-databind

react-dom, react-dom, react-dom, react-dom, react-dom

Cross-Site Scripting in react-dom

binutils, binutils, binutils

crash

CVE-2018-20673 affecting package crash for versions less than 9.0.0-1

binutils, binutils, binutils

django, django

Django vulnerable to XSS on 500 pages

django, django, django

Django open redirect and possible XSS attack via user-supplied numeric redirect URLs

django, django, django

Django open redirect

django, django, django

Django denial-of-service possibility in urlize and urlizetrunc template filters

django, django, django

Django Denial-of-service possibility in truncatechars_html and truncatewords_html template filters

recurly, recurly, recurly, recurly, recurly, recurly, recurly

Recurly vulnerable to SSRF

mistune

mistune Cross-site scripting (XSS) vulnerability

plone, plone

Plone Open Redirect

bleach

Bleach URI Scheme Restriction Bypass

moin

Moderate severity vulnerability that affects moin

pyyaml

PyYAML insecurely deserializes YAML strings leading to arbitrary code execution

sqla-yaml-fixtures

sqla-yaml-fixtures is vulnerable to Code Injection

com.hubspot.jinjava:jinjava

Jinjava calls getClass

org.hswebframework.web:hsweb-commons

Moderate severity vulnerability that affects org.hswebframework.web:hsweb-commons

org.hswebframework.web:hsweb-commons

Cross-Site Request Forgery (CSRF) in hswebframework.web:hsweb-commons

rendertron

rendertron LFI vulnerability

rendertron

rendertron can remotely shut down Chrome instance

react-dev-utils, react-dev-utils, react-dev-utils, react-dev-utils, react-dev-utils

react-dev-utils on Windows vulnerable to Remote Code Execution