Open Source Vulnerabilities

drupal/typogrify

fonttools, fonttools, fonttools

redis, redis, redis, redis, redis, redis, redis, redis, redis

redis, redis, redis

fonttools

redis

fonttools XML External Entity Injection (XXE) Vulnerability

Redis vulnerable to integer overflow in certain payloads

gitpython

Untrusted search path under some conditions on Windows allows arbitrary code execution

github.com/go-git/go-git/v5, gopkg.in/src-d/go-git.v4

Maliciously crafted Git server replies can lead to path traversal and RCE on go-git clients

github.com/cri-o/cri-o, github.com/cri-o/cri-o, github.com/cri-o/cri-o

CRI-O's pods can break out of resource confinement on cgroupv2

pimcore/customer-management-framework-bundle

Pimcore Customer Data Framework Improper Access Control allows unprivileged user to access GDPR extracts

pimcore/customer-management-framework-bundle

Pimcore Customer Data Framework Improper Access Control allows unprivileged user to access customers duplicates list

pimcore/ecommerce-framework-bundle

Pimcore Ecommerce Framework Bundle Improper Access Control allows unprivileged user to access back-office orders list

github.com/quic-go/quic-go, github.com/quic-go/quic-go, github.com/quic-go/quic-go, github.com/quic-go/quic-go

quic-go's path validation mechanism can be exploited to cause denial of service