Open Source Vulnerabilities

mopa

Incorrect reliance on Trait memory layout in mopa

ckb

RPC call failure in ckb

molecule

The `total_size` function for partial read the length of any `FixVec` is incorrect in molecule.

sha2

Incorrect hash in sha2

tremor-script

Use After Free in tremor-script

ckb

Denial of Service in ckb

ckb

Allocation of Resources Without Limits or Throttling in ckb

tectonic_xdv

Use of Uninitialized Resource in tectonic_xdv

tremor-script

Use After Free in tremor-script

nanorand

Pointer dereference in nanorand

metrics-util

Out-of-bounds Write and Race Condition in metrics-util

zeroize_derive

Memory flaw in zeroize_derive

abomonation

Abomonation transmutes &T to and from &[u8] without sufficient constraints

nix, nix, nix

Out-of-bounds Write in nix

simple_asn1

Uncontrolled Resource Consumption in simple_asn1

crypto2

Use of a Broken or Risky Cryptographic Algorithm in crypto2

tokio, tokio

Race Condition in tokio

netgen/tagsbundle, netgen/tagsbundle

Cross-site Scripting in Netgen Tags Bundle

rust-embed

Path Traversal in rust-embed

rusqlite, rusqlite

Use After Free in rusqlite

rusqlite, rusqlite

Use After Free in rusqlite

rusqlite, rusqlite

Use After Free in rusqlite

showdoc/showdoc

showdoc is vulnerable to Cross-Site Request Forgery (CSRF)

rusqlite, rusqlite

Use After Free in rusqlite

rusqlite, rusqlite

Use After Free in rusqlite

rusqlite, rusqlite

Use After Free in rusqlite

rusqlite, rusqlite

Use After Free in rusqlite

archivy

archivy is vulnerable to Cross-Site Request Forgery (CSRF)

js-data

Prototype Pollution in js-data

hillelcoren/invoice-ninja

invoiceninja is vulnerable to Cross-site Scripting

parse-link-header

Uncontrolled Resource Consumption in parse-link-header

github.com/kataras/iris/v12, github.com/kataras/iris

Link Following in Iris

elgg/elgg

elgg is vulnerable to Cross-site Scripting

org.apache.solr:solr-parent

Apache Solr Improper Input Validation and Path Traversal

gpac

gpac

gpac, gpac, gpac, gpac, gpac, gpac

gpac, gpac, gpac, gpac, gpac, gpac

github.com/containers/podman/v3

Exposure of Sensitive Information to an Unauthorized Actor and Origin Validation Error in podman

unisharp/laravel-filemanager

Unrestricted Upload of File with Dangerous Type in unisharp/laravel-filemanager

latte/latte

Incorrect Authorization in latte/latte

is-my-json-valid, is-my-json-valid

Regular expression deinal of service (ReDoS) in is-my-json-valid

braces

Regular Expression Denial of Service (ReDoS) in braces

org.apache.nifi:nifi

Inadequate Encryption Strength in Apache NiFi

org.apache.nifi:nifi

Missing Authentication for Critical Function in Apache NiFi

org.apache.nifi:nifi-stateless

Insertion of Sensitive Information into Log File in Apache NiFi Stateless

org.apache.nifi:nifi

Improper Restriction of XML External Entity Reference in Apache NiFi