Open Source Vulnerabilities

python-aiohttp, python-aiohttp, python-aiohttp, python-aiohttp, python-aiohttp, python-aiohttp

Security update for python-aiohttp

python-aiohttp, python-aiohttp

Security update for python-aiohttp

pycryptodomex, pycryptodome

PyCryptodome and pycryptodomex side-channel leakage for OAEP decryption

pycryptodome, pycryptodome, pycryptodome

pycryptodome, pycryptodome, pycryptodome

pycryptodomex

grumpydictator/firefly-iii

Firefly III allows webhooks HTML Injection.

tomcat9

tomcat9 - security update

exim4

exim4 - security update

view_component, view_component

view_component Cross-site Scripting vulnerability

iodine

Duplicate Advisory: Malicious URL drafting attack against iodines static file server may allow path traversal

govuk_tech_docs

Duplicate Advisory: govuk_tech_docs vulnerable to unescaped HTML on search results page

encoded_id-rails

Duplicate Advisory: encoded_id-rails potential DOS vulnerability due to URIs with extremely long encoded IDs

httparty

Duplicate Advisory: httparty has multipart/form-data request tampering vulnerability

commonmarker

Duplicate Advisory: Integer overflow in cmark-gfm table parsing extension leads to heap memory corruption

audited

Duplicate Advisory: Race Condition leading to logging errors

ruby-commonmarker, ruby-commonmarker, ruby-commonmarker

ruby-httparty, ruby-httparty, ruby-httparty

ruby-commonmarker, ruby-commonmarker

ruby-httparty, ruby-httparty, ruby-httparty, ruby-httparty

encoded_id-rails Denial of Service Vulnerability

govuk_tech_docs XSS Vulnerability

Audited Log Integrity Errors Due to Race Condition

CommonMarker Integer Overflow Vulnerability