Open Source Vulnerabilities

cri-o

CVE-2023-6476 affecting package cri-o for versions less than 1.22.3-10

aries-cloudagent, aries-cloudagent

Hyperledger Aries Cloud Agent Python result of presentation verification not checked for LDP-VC

System.IdentityModel.Tokens.Jwt, System.IdentityModel.Tokens.Jwt, System.IdentityModel.Tokens.Jwt, Microsoft.IdentityModel.JsonWebTokens, Microsoft.IdentityModel.JsonWebTokens, Microsoft.IdentityModel.JsonWebTokens

Microsoft ASP.NET Core project templates vulnerable to denial of service

react-native-mmkv

react-native-mmkv Insertion of Sensitive Information into Log File vulnerability

Parsing JSON serialized payload without protected field can lead to segfault

dotnet6-build, dotnet6-build, dotnet6-runtime, dotnet6-runtime, dotnet7-build, dotnet7-runtime

,

Insertion of Sensitive Information into Log File in react-native-mmkv

linux-gkeop

linux-gkeop vulnerabilities

Microsoft.Data.SqlClient, System.Data.SqlClient, Microsoft.Data.SqlClient, Microsoft.Data.SqlClient, Microsoft.Data.SqlClient

Microsoft.Data.SqlClient and System.Data.SqlClient vulnerable to SQL Data Provider Security Feature Bypass

NuGet.CommandLine

Duplicate Advisory: NuGet Client Security Feature Bypass Vulnerability

linux-azure

linux-azure vulnerabilities

Microsoft.IdentityModel.JsonWebTokens, Microsoft.IdentityModel.JsonWebTokens, Microsoft.IdentityModel.JsonWebTokens, System.IdentityModel.Tokens.Jwt, System.IdentityModel.Tokens.Jwt, System.IdentityModel.Tokens.Jwt

Duplicate Advisory: Microsoft Identity Denial of service vulnerability

Microsoft.IdentityModel.Protocols.SignedHttpRequest, Microsoft.IdentityModel.Protocols.SignedHttpRequest

Microsoft.IdentityModel.Protocols.SignedHttpRequest remote code execution vulnerability

libarchive, libarchive, libarchive

libarchive, libarchive, libarchive, libarchive, libarchive, libarchive, libarchive, libarchive