Open Source Vulnerabilities

angular, org.webjars.npm:angular, org.webjars.bower:angular

angular vulnerable to super-linear runtime due to backtracking

angular.js, angular.js

angular.js, angular.js, angular.js, angular.js

filezilla, libfilezilla

Updated filezilla packages fix a security vulnerability ("Terrapin attack")

wolfssl, wolfssl, wolfssl, wolfssl, wolfssl, wolfssl

wolfssl, wolfssl

wolfssl, wolfssl, wolfssl, wolfssl

nonebot2

Envoy crashes when idle and request per try timeout occur within the backoff interval

Excessive CPU usage when URI template matcher is configured using regex in Envoy

Envoy ext auth can be bypassed when Proxy protocol filter sets invalid UTF-8 metadata

Envoy crashes when using an address type that isn’t supported by the OS

Crash in proxy protocol when command type of LOCAL in Envoy

Cross-Site Scripting in the extensions, settings, permissions and namespaces subpages of ManageWiki

Marvin Attack vulnerability in SP Math All RSA

Local Privilege Escalation in execuatables bundled by pkg

Potential Information Leak in User-Constructed Message Templates in nonebot2

concrete5/concrete5

Concrete CMS vulnerable to reflected XSS via the Image URL Import Feature

concrete5/concrete5

Concrete CMS vulnerable to stored XSS in file tags and description attributes

concrete5/concrete5

Concrete CMS vulnerable to stored XSS via the Role Name field

Concrete CMS version 9 before 9.2.5 is vulnerable to stored XSS in file tags and description attributes

Concrete CMS in version 9 before 9.2.5 is vulnerable to reflected XSS via the Image URL Import Feature