Open Source Vulnerabilities

uptime-kuma

Password Change Vulnerability

github.com/treeverse/lakefs

lakeFS logs S3 credentials in plain text

github.com/treeverse/lakefs

User with permission to write actions can impersonate another user when auth token is configured in environment variable

nuxt-api-party

SSRF & Credentials Leak

@openzeppelin/contracts, @openzeppelin/contracts-upgradeable

OpenZeppelin Contracts and Contracts Upgradeable duplicated execution of subcalls in v4.9.4

mindsdb

Improper Input Validation in mindsdb

mindsdb

Server-Side Request Forgery in mindsdb

github.com/mojocn/base64Captcha

Always incorrect control flow in github.com/mojocn/base64Captcha

sigstore-java

Security exception in java.base/sun.security.util.DerInputStream.getUnalignedBitString

containernetworking-plugins

Moderate: containernetworking-plugins security update

podman, podman-docker, podman-gvproxy, podman-plugins, podman-remote, podman-tests

Moderate: podman security update

buildah, buildah-tests

Moderate: buildah security update

runc

Moderate: runc security update

skopeo, skopeo-tests

Moderate: skopeo security update

pixman, pixman-devel

Moderate: pixman security update

libxml2, libxml2-devel, python3-libxml2

Moderate: libxml2 security update

tracker-miners

Important: tracker-miners security update

fence-agents-aliyun, fence-agents-all, fence-agents-amt-ws, fence-agents-apc, fence-agents-apc-snmp, fence-agents-aws, fence-agents-azure-arm, fence-agents-bladecenter, fence-agents-brocade, fence-agents-cisco-mds, fence-agents-cisco-ucs, fence-agents-common, fence-agents-compute, fence-agents-drac5, fence-agents-eaton-snmp, fence-agents-emerson, fence-agents-eps, fence-agents-gce, fence-agents-heuristics-ping, fence-agents-hpblade, fence-agents-ibm-powervs, fence-agents-ibm-vpc, fence-agents-ibmblade, fence-agents-ifmib, fence-agents-ilo-moonshot, fence-agents-ilo-mp, fence-agents-ilo-ssh, fence-agents-ilo2, fence-agents-intelmodular, fence-agents-ipdu, fence-agents-ipmilan, fence-agents-kdump, fence-agents-kubevirt, fence-agents-lpar, fence-agents-mpath, fence-agents-openstack, fence-agents-redfish, fence-agents-rhevm, fence-agents-rsa, fence-agents-rsb, fence-agents-sbd, fence-agents-scsi, fence-agents-virsh, fence-agents-vmware-rest, fence-agents-vmware-soap, fence-agents-wti, fence-agents-zvm, fence-virt, fence-virtd, fence-virtd-cpg, fence-virtd-libvirt, fence-virtd-multicast, fence-virtd-serial, fence-virtd-tcp, ha-cloud-support

Moderate: fence-agents security update

linux-aws-5.4, linux-azure-5.4, linux-gcp-5.4, linux-hwe-5.4, linux-ibm-5.4, linux, linux-aws, linux-azure, linux-bluefield, linux-gcp, linux-ibm, linux-kvm, linux-xilinx-zynqmp

linux, linux-aws, linux-aws-5.4, linux-azure, linux-azure-5.4, linux-bluefield, linux-gcp, linux-gcp-5.4, linux-hwe-5.4, linux-ibm, linux-ibm-5.4, linux-kvm, linux-xilinx-zynqmp vulnerabilities

linux-aws-5.15, linux-azure-5.15, linux-azure-fde-5.15, linux-hwe-5.15, linux-ibm-5.15, linux-oracle-5.15, linux, linux-aws, linux-azure, linux-azure-fde, linux-gcp, linux-gke, linux-ibm, linux-kvm, linux-nvidia, linux-oracle, linux-raspi

linux, linux-aws, linux-aws-5.15, linux-azure, linux-azure-5.15, linux-azure-fde, linux-azure-fde-5.15, linux-gcp, linux-gke, linux-hwe-5.15, linux-ibm, linux-ibm-5.15, linux-kvm, linux-nvidia, linux-oracle, linux-oracle-5.15, linux-raspi vulnerabilities

@koa/cors has overly permissive origin policy

OpenEXR-viewer memory overflow vulnerability

Uptime Kuma Missing Origin Validation in WebSockets

Uptime Kuma Password Change Vulnerability

Captcha verification bypass in github.com/mojocn/base64Captcha

Gsemac.Net

Stale copy of the public suffix list

@koa/cors

Overly permissive origin policy

mindsdb

MantisBT LinkedCustomFields Cross-site Scripting vulnerability

MindsDB Arbitrary File Write vulnerability

nuxt-api-party

DOS by abusing `fetchOptions.retry`.