Open Source Vulnerabilities

log4j

Updated log4j packages fix security vulnerability

github.com/sylabs/singularity

Insecure permissions on user namespace / fakeroot temporary rootfs in Singularity

github.com/sylabs/singularity

Incorrect Permission Assignment for Critical Resource in Singularity

github.com/sylabs/singularity

"Verify All" Returns Success Despite Validation Failures in Singularity

github.com/sylabs/singularity

Execution Control List (ECL) Is Insecure in Singularity

github.com/opencontainers/runc

devices resource list treated as a blacklist by default

github.com/opencontainers/runc

Information Exposure in RunC

github.com/opencontainers/runc

Privilege Elevation in runc

github.com/tendermint/tendermint

Signature verification failure in Tendermint

github.com/tendermint/tendermint

Denial of Service in TenderMint

github.com/sourcegraph/sourcegraph, github.com/sourcegraph/sourcegraph

Open redirect vulnerability in Sourcegraph

github.com/bitly/oauth2_proxy

Cross-site Request Forgery (CSRF)

github.com/bitly/oauth2_proxy

Open Redirect in oauth2_proxy

github.com/oauth2-proxy/oauth2-proxy

The pattern '/\domain.com' is not disallowed when redirecting, allowing for open redirect

github.com/oauth2-proxy/oauth2-proxy

Open Redirect in OAuth2 Proxy

github.com/oauth2-proxy/oauth2-proxy

Open Redirect in OAuth2 Proxy

github.com/concourse/concourse, github.com/concourse/concourse, github.com/concourse/dex, github.com/concourse/dex, github.com/concourse/dex, github.com/concourse/concourse, github.com/concourse/concourse

GitLab auth uses full name instead of username as user ID, allowing impersonation

github.com/dexidp/dex, github.com/russellhaering/goxmldsig

Critical security issues in XML encoding in github.com/dexidp/dex

github.com/dexidp/dex

Authentication Bypass in dex

netdata, netdata

Security update for netdata

npm-groovy-lint

Remote Code Execution in npm-groovy-lint

github.com/openshift/origin

Denial of Service in OpenShift Origin

github.com/openshift/origin

Authorization bypass in Openshift