Open Source Vulnerabilities

clearml

Allegro AI ClearML Stores Credentials in Plaintext in MongoDB Instance

gradio

Gradio Path Traversal vulnerability

stimulsoft-dashboards-js

Stimulsoft Dashboard.JS directory traversal vulnerability

org.springframework.security:spring-security-config, org.springframework.security:spring-security-config, org.springframework.security:spring-security-config, org.springframework.security:spring-security-config

Spring Security's spring-security.xsd file is world writable

libxml2

Heap-use-after-free in xmlRemoveID

pyload-ng

pyLoad open redirect vulnerability due to improper validation of the is_safe_url function

gradio

LFI in Gradio