Open Source Vulnerabilities

org.jeecgframework.boot:jeecg-boot-common

Jeecg Boot SQL injection vulnerability

org.jeecgframework.boot:jeecg-boot-common

Jeecg Boot SQL Injection

org.infinispan:infinispan-server-rest, org.infinispan:infinispan-server-rest

Infinispan REST Server's cache retrieval endpoints do not properly evaluate the necessary admin permissions

org.infinispan:infinispan-server-rest, org.infinispan:infinispan-server-rest

Infinispan REST Server's bulk read endpoints do not properly evaluate user permissions

quickjs

Heap-use-after-free in JS_NewObjectFromShape

,

cjson

cjson - security update

libde265

libde265 - security update

libspreadsheet-parseexcel-perl, libspreadsheet-parseexcel-perl

libspreadsheet-parseexcel-perl - security update

,

,

miniflare

Miniflare vulnerable to Server-Side Request Forgery (SSRF)

Novel-Plus Friendly Link FriendLinkController.java cross site scripting

Misskey vulnerable to improper authorization when accessing with third-party application

proftpd

Updated proftpd packages fix a security vulnerability

libssh

Updated libssh packages fix security vulnerabilities

hail

GitHub Action tj-actions/verify-changed-files is vulnerable to command injection in output filenames

Hail authentication can be bypassed by changing email address

org.jline:jline-parent

JLine vulnerable to out of memory error

org.jeasy:easy-rules-mvel

easy-rules-mvel vulnerable to remote code execution

com.github.seancfoley:ipaddress

IPAddress Infinite Loop vulnerability (Disputed)

github.com/mattermost/mattermost/server/v8

Mattermost Cross-site Scripting vulnerability

jline3, jline3, jline3, jline3

jline

CVE-2023-50572 affecting package jline 2.14.6-1

jline

CVE-2023-50572 affecting package jline 2.14.6-1