Open Source Vulnerabilities

sanitize-html

Cross-Site Scripting in sanitize-html

i18next

Cross-Site Scripting in i18next

morris.js

Cross-Site Scripting in morris.js

forms

Cross-Site Scripting in forms

sanitize-html

Cross-Site Scripting in sanitize-html

restify

Cross-Site Scripting (XSS) in restify

sync-exec

Tmp files readable by other users in sync-exec

hostr

Directory Traversal in hostr

request, request

Remote Memory Exposure in request

gruntcli

gruntcli is malware

mssql-node

mssql-node is malware

org.apache.spark:spark-core_2.11, org.apache.spark:spark-core_2.10, pyspark

Apache Spark Deserialization of Untrusted Data vulnerability

org.apache.spark:spark-core_2.11, org.apache.spark:spark-core_2.10

Moderate severity vulnerability that affects org.apache.spark:spark-core_2.10 and org.apache.spark:spark-core_2.11

mssql.js

mssql.js is malware

nodemssql

nodemssql is malware

io.spray:spray-json_2.12, io.spray:spray-json_2.11, io.spray:spray-json_2.10

Uncontrolled Resource Consumption in spray-json when parsing decimal digit fields

org.apache.spark:spark-core_2.11, org.apache.spark:spark-core_2.10

org.apache.spark:spark-core_2.10 and org.apache.spark:spark-core_2.11 Improper Authentication vulnerability

io.spray:spray-json_2.12, io.spray:spray-json_2.11, io.spray:spray-json_2.10

Uncontrolled Resource Consumption in spray-json

editor.md

Pandao editor.md vulnerable to DOM XSS

superset

Deserialization of Untrusted Data in superset

kernel-default, kernel-source, kernel-syms, kernel-default, kernel-docs, kernel-obs-build, kernel-default, kernel-source, kernel-syms, lttng-modules, kernel-default, kernel-source, kernel-syms, lttng-modules, kernel-default

Security update for the Linux Kernel

kgraft-patch-SLE12-SP3_Update_21

Security update for the Linux Kernel

squid, squid, squid

squid, squid, squid

libav

libav

libav

MozillaThunderbird

Security update for MozillaThunderbird