Open Source Vulnerabilities

WordPress ANAC XML Bandi di Gara Plugin <= 7.5 is vulnerable to Cross Site Request Forgery (CSRF)

yt-dlp, yt-dlp

Security update for yt-dlp

libxaac

Index-out-of-bounds in iaace_calc_sfb_dist

serenity

Heap-buffer-overflow in Gfx::ICC::TextDescriptionTagData::from_bytes

hann-rs-service

`hann-rs-service` was removed from crates.io for malicious code

openvpn-plugin-rs

`openvpn-plugin-rs` was removed from crates.io for malicious code

windowsservice

`windowsservice` was removed from crates.io for malicious code

org.opencrx:opencrx-core-models

Cross-site Scripting in OpenCRX

org.opencrx:opencrx-core-models

Cross-site Scripting in OpenCRX

org.opencrx:opencrx-core-models

Cross-site Scripting in OpenCRX

org.opencrx:opencrx-core-models

Cross-site Scripting in OpenCRX

org.opencrx:opencrx-core-models

Cross-site Scripting in OpenCRX

org.opencrx:opencrx-core-models

Cross-site Scripting in OpenCRX

org.opencrx:opencrx-core-models

Cross-site Scripting in OpenCRX

org.opencrx:opencrx-core-models

Cross-site Scripting in OpenCRX

gnutls, gnutls

Paid Memberships Pro <= 2.12.3 - Authenticated (Subscriber+) Arbitrary File Upload

github.com/whilp/git-urls

Inefficient Regular Expression Complexity in git-urls