Open Source Vulnerabilities

rubyzip

High severity vulnerability that affects rubyzip

nokogiri

Nokogiri implementation of libxslt lacks integer overflow checks

rack-cors

Missing Regex anchor in Rack-Cors allows malicious third party site to perform CORS request

mitmproxy

Mitmweb in mitmproxy allows DNS Rebinding attacks

json-jwt

Json-jwt did not verify the cryptographic signature for data

private_address_check

private_address_check contains race condition

keystone, keystone, keystone

keystone, keystone

tomcat-native, tomcat-native, tomcat-native

tomcat-native, tomcat-native, tomcat-native

tomcat-native

tomcat-native

chan

chan is end-of-life; use crossbeam-channel instead

kernel-rt, kernel-rt_debug, kernel-source-rt, kernel-syms-rt

Security update for the Linux Kernel

kamailio, kamailio, kamailio

kamailio, kamailio, kamailio, kamailio, kamailio, kamailio, kamailio, kamailio, kamailio, kamailio, kamailio, kamailio, kamailio, kamailio, kamailio, kamailio, kamailio, kamailio, kamailio

kamailio, kamailio

libxml2, libxml2, libxml2

libraw, libraw, darktable, dcraw, exactimage, kodi, rawtherapee, ufraw, libraw, darktable, dcraw, exactimage, kodi, rawtherapee, ufraw, darktable, dcraw, exactimage, kodi, rawtherapee, darktable, dcraw, exactimage, kodi, rawtherapee, darktable, dcraw, exactimage, kodi, rawtherapee, darktable, dcraw, exactimage, kodi, rawtherapee, darktable, dcraw, exactimage, kodi, rawtherapee