Open Source Vulnerabilities

league/flysystem, league/flysystem

Time-of-check Time-of-use (TOCTOU) Race Condition in league/flysystem

sylius/sylius

List of order ids, number, items total and token value exposed for unauthorized uses via new API

Heap-buffer-overflow in orbit_object_utils::ElfFileImpl<llvm::object::ELFType<

libjdom2-java

libjdom2-java - security update

fluidsynth

fluidsynth - security update

trousers

Updated trousers packages fix security vulnerabilities

java-11-openjdk, copy-jdk-configs, java-1.8.0-openjdk

Updated java-openjdk packages fix security vulnerabilities

kernel, kmod-virtualbox, kmod-xtables-addons, kernel, kmod-virtualbox, kmod-xtables-addons

Updated kernel packages fix security vulnerabilities

kernel-linus, kernel-linus

Updated kernel-linus packages fix security vulnerabilities

libgcrypt, libgcrypt

Updated libgcrypt packages fix a security vulnerability

tor, tor

Updated tor package fixes security vulnerabilities

openjpeg2, openjpeg2

Updated openjpeg2 packages fix a security vulnerability

gnutls, gnutls

Updated gnutls packages fix security vulnerabilities

leptonica

Updated leptonica packages fix security vulnerabilities

glibc

Updated glibc packages fix a security vulnerability

bash

Updated bash packages fix a security vulnerability

node-prismjs, node-prismjs, node-prismjs, node-prismjs, node-prismjs

prismjs

Regular Expression Denial of Service (ReDoS) in Prism

shopware/platform, shopware/core

non-admin users can create integration role with administrator role

shopware/platform, shopware/core

Internal hidden fields are visible on to many associations in admin api

shopware/platform, shopware/core

Private files publicly accessible with Cloud Storage providers

postsrsd, postsrsd, postsrsd

postsrsd, postsrsd, postsrsd, postsrsd, postsrsd, postsrsd, postsrsd

mongo-express

Cross-site scripting

tenvoy

Improper Verification of Cryptographic Signature

python-requests, python-urllib3, python-requests, python-urllib3, python-requests, python-urllib3

Security update for python-urllib3, python-requests

aws-cli, python-PyYAML, python-botocore, python-colorama, python-pexpect, python-ptyprocess, python-six, python-urllib3, python3-requests, python-PyYAML, python-colorama, python-configparser, python-pexpect, python-ptyprocess, python-scandir, python-websocket-client, aws-cli, python-PyYAML, python-botocore, python-colorama, python-pexpect, python-ptyprocess, python-six, python-urllib3, python3-requests, python-urllib3, python3-requests, aws-cli, python-PyYAML, python-botocore, python-colorama, python-pexpect, python-ptyprocess, python-six, python-urllib3, python3-requests, python-urllib3, python3-requests, python-pexpect, python-ptyprocess, python-pexpect, python-ptyprocess, python-pexpect, python-ptyprocess, python-requests, aws-cli, azure-cli, azure-cli-command-modules-nspkg, azure-cli-core, azure-cli-nspkg, azure-cli-telemetry, azure-cli-test, libsodium, python-Fabric, python-PyNaCl, python-PyYAML, python-Pygments, python-adal, python-antlr4-python3-runtime, python-applicationinsights, python-atomicwrites, python-attrs, python-azure-ai-anomalydetector, python-azure-ai-metricsadvisor, python-azure-ai-nspkg, python-azure-ai-textanalytics, python-azure-appconfiguration, python-azure-applicationinsights, python-azure-batch, python-azure-cognitiveservices-anomalydetector, python-azure-cognitiveservices-formrecognizer, python-azure-cognitiveservices-inkrecognizer, python-azure-cognitiveservices-knowledge-nspkg, python-azure-cognitiveservices-knowledge-qnamaker, python-azure-cognitiveservices-language-luis, python-azure-cognitiveservices-language-nspkg, python-azure-cognitiveservices-language-spellcheck, python-azure-cognitiveservices-language-textanalytics, python-azure-cognitiveservices-nspkg, python-azure-cognitiveservices-personalizer, python-azure-cognitiveservices-search-autosuggest, python-azure-cognitiveservices-search-customimagesearch, python-azure-cognitiveservices-search-customsearch, python-azure-cognitiveservices-search-entitysearch, python-azure-cognitiveservices-search-imagesearch, python-azure-cognitiveservices-search-newssearch, python-azure-cognitiveservices-search-nspkg, python-azure-cognitiveservices-search-videosearch, python-azure-cognitiveservices-search-visualsearch, python-azure-cognitiveservices-search-websearch, python-azure-cognitiveservices-vision-computervision, python-azure-cognitiveservices-vision-contentmoderator, python-azure-cognitiveservices-vision-customvision, python-azure-cognitiveservices-vision-face, python-azure-cognitiveservices-vision-nspkg, python-azure-common, python-azure-communication-administration, python-azure-communication-chat, python-azure-communication-nspkg, python-azure-communication-sms, python-azure-core, python-azure-cosmos, python-azure-data-nspkg, python-azure-data-tables, python-azure-datalake-store, python-azure-devops, python-azure-eventgrid, python-azure-eventhub, python-azure-eventhub-checkpointstoreblob, python-azure-functions-devops-build, python-azure-graphrbac, python-azure-identity, python-azure-keyvault, python-azure-keyvault-administration, python-azure-keyvault-certificates, python-azure-keyvault-keys, python-azure-keyvault-nspkg, python-azure-keyvault-secrets, python-azure-loganalytics, python-azure-mgmt, python-azure-mgmt-advisor, python-azure-mgmt-alertsmanagement, python-azure-mgmt-apimanagement, python-azure-mgmt-appconfiguration, python-azure-mgmt-applicationinsights, python-azure-mgmt-appplatform, python-azure-mgmt-attestation, python-azure-mgmt-authorization, python-azure-mgmt-automanage, python-azure-mgmt-automation, python-azure-mgmt-azurestack, python-azure-mgmt-azurestackhci, python-azure-mgmt-baremetalinfrastructure, python-azure-mgmt-batch, python-azure-mgmt-batchai, python-azure-mgmt-billing, python-azure-mgmt-botservice, python-azure-mgmt-cdn, python-azure-mgmt-cognitiveservices, python-azure-mgmt-commerce, python-azure-mgmt-communication, python-azure-mgmt-compute, python-azure-mgmt-consumption, python-azure-mgmt-containerinstance, python-azure-mgmt-containerregistry, python-azure-mgmt-containerservice, python-azure-mgmt-core, python-azure-mgmt-cosmosdb, python-azure-mgmt-costmanagement, python-azure-mgmt-databoxedge, python-azure-mgmt-databricks, python-azure-mgmt-datafactory, python-azure-mgmt-datalake-analytics, python-azure-mgmt-datalake-nspkg, python-azure-mgmt-datalake-store, python-azure-mgmt-datamigration, python-azure-mgmt-datashare, python-azure-mgmt-deploymentmanager, python-azure-mgmt-devspaces, python-azure-mgmt-devtestlabs, python-azure-mgmt-dns, python-azure-mgmt-documentdb, python-azure-mgmt-edgegateway, python-azure-mgmt-eventgrid, python-azure-mgmt-eventhub, python-azure-mgmt-frontdoor, python-azure-mgmt-hanaonazure, python-azure-mgmt-hdinsight, python-azure-mgmt-healthcareapis, python-azure-mgmt-hybridcompute, python-azure-mgmt-imagebuilder, python-azure-mgmt-iotcentral, python-azure-mgmt-iothub, python-azure-mgmt-iothubprovisioningservices, python-azure-mgmt-keyvault, python-azure-mgmt-kubernetesconfiguration, python-azure-mgmt-kusto, python-azure-mgmt-labservices, python-azure-mgmt-loganalytics, python-azure-mgmt-logic, python-azure-mgmt-machinelearningcompute, python-azure-mgmt-machinelearningservices, python-azure-mgmt-managedservices, python-azure-mgmt-managementgroups, python-azure-mgmt-managementpartner, python-azure-mgmt-maps, python-azure-mgmt-marketplaceordering, python-azure-mgmt-media, python-azure-mgmt-mixedreality, python-azure-mgmt-monitor, python-azure-mgmt-msi, python-azure-mgmt-netapp, python-azure-mgmt-network, python-azure-mgmt-notificationhubs, python-azure-mgmt-nspkg, python-azure-mgmt-peering, python-azure-mgmt-policyinsights, python-azure-mgmt-powerbiembedded, python-azure-mgmt-privatedns, python-azure-mgmt-rdbms, python-azure-mgmt-recoveryservices, python-azure-mgmt-recoveryservicesbackup, python-azure-mgmt-redhatopenshift, python-azure-mgmt-redis, python-azure-mgmt-regionmove, python-azure-mgmt-relay, python-azure-mgmt-reservations, python-azure-mgmt-resource, python-azure-mgmt-resourcegraph, python-azure-mgmt-resourcemover, python-azure-mgmt-scheduler, python-azure-mgmt-search, python-azure-mgmt-security, python-azure-mgmt-serialconsole, python-azure-mgmt-servermanager, python-azure-mgmt-servicebus, python-azure-mgmt-servicefabric, python-azure-mgmt-signalr, python-azure-mgmt-sql, python-azure-mgmt-sqlvirtualmachine, python-azure-mgmt-storage, python-azure-mgmt-storagecache, python-azure-mgmt-storageimportexport, python-azure-mgmt-storagesync, python-azure-mgmt-streamanalytics, python-azure-mgmt-subscription, python-azure-mgmt-synapse, python-azure-mgmt-trafficmanager, python-azure-mgmt-vmwarecloudsimple, python-azure-mgmt-web, python-azure-monitor, python-azure-multiapi-storage, python-azure-nspkg, python-azure-sdk, python-azure-search-documents, python-azure-search-nspkg, python-azure-servicebus, python-azure-servicefabric, python-azure-servicemanagement-legacy, python-azure-storage-blob, python-azure-storage-common, python-azure-storage-file, python-azure-storage-file-datalake, python-azure-storage-file-share, python-azure-storage-nspkg, python-azure-storage-queue, python-azure-synapse-accesscontrol, python-azure-synapse-artifacts, python-azure-synapse-nspkg, python-azure-synapse-spark, python-bcrypt, python-boto3, python-botocore, python-brotlipy, python-colorama, python-configparser, python-contextlib2, python-fluidity-sm, python-importlib-metadata, python-importlib_resources, python-invoke, python-javaproperties, python-jsmin, python-jsondiff, python-knack, python-lexicon, python-more-itertools, python-msal, python-msal-extensions, python-msrest, python-msrestazure, python-multidict, python-nose, python-paramiko, python-pathlib2, python-pexpect, python-pkginfo, python-pluggy, python-portalocker, python-ptyprocess, python-pydocumentdb, python-pyfakefs, python-pytest, python-pytest-mock, python-pytest-relaxed, python-pytz, python-requests, python-scandir, python-scp, python-six, python-spec, python-uamqp, python-urllib3, python-vcrpy, python-vsts, python-websocket-client, python-wrapt, python-xmltodict, python-yarl, python-zipp, libsodium, python-six, python-urllib3, python3-requests, python-urllib3, python3-requests, python-urllib3, python3-requests, python-six, python-urllib3, python3-requests, python-six, python-urllib3, python3-requests, python-six, python-urllib3, python3-requests, python-urllib3, python3-requests, python-requests, python-urllib3, python3-requests, python-requests, python-urllib3, python3-requests, python-pexpect, python-ptyprocess, python-urllib3, python3-requests

Recommended update for the Azure and AWS SDKs

shopware/platform, shopware/core

Creation of order credits was not validated by acl in admin orders

shopware/platform, shopware/core

Canceling of orders not related to the logged-in user

com.vaadin:vaadin-bom, com.vaadin:vaadin-bom

Reflected cross-site scripting in development mode handler in Vaadin 14, 15-19

com.vaadin:vaadin-bom, com.vaadin:vaadin-bom, com.vaadin:vaadin-bom

Possible route enumeration in production mode via RouteNotFoundError view in Vaadin 10, 11-14, and 15-19

com.vaadin:flow-server, com.vaadin:flow-server

Reflected cross-site scripting in development mode handler in Vaadin