Open Source Vulnerabilities

chromium, chromium, chromium

chromium, chromium, chromium

io.quarkus:quarkus-project

Quarkus does not properly sanitize artifacts created from its use of the Gradle plugin, allowing certain build system information to remain

com.xuxueli:xxl-job-admin

xxl-job-admin vulnerable to Insecure Permissions

com.xuxueli:xxl-job-admin

xxl-job-admin vulnerable to Cross Site Scripting

ml.combust.mleap:mleap-runtime_2.12

Zip slip in mleap

com.xuxueli:xxl-job-admin

xxl-job-admin vulnerable to Remote Code Execution

pimcore/pimcore

Pimcore SQL Injection in Admin Grid Filter API through Multiselect::getFilterConditionExt()

dotnet6, dotnet7

dotnet6, dotnet7, dotnet8 vulnerabilities

pimcore/admin-ui-classic-bundle

pimcore/admin-ui-classic-bundle Full Path Disclosure via re-export document

yt-dlp

yt-dlp Generic Extractor MITM Vulnerability via Arbitrary Proxy Injection

qemu

Security update for qemu

tidy-html5, tidy-html5

tidy-html5 vulnerability

quagga

quagga vulnerabilities

drupal/mollie

frr

frr vulnerabilities

Eclipse OpenJ9 possible infinite busy hang

Quarkus: build env information disclosure via gradle plugin

clamav

Memcpy-param-overlap in repeat

lcms

Heap-buffer-overflow in WriteCLUT

opensc

Invalid-free in sc_file_clear_acl_entries

Using MLeap for loading a saved model (zip archive) can lead to path traversal/arbitrary file creation and possibly remote code execution.

apache2, apache2-tls13, apache2, apache2-tls13, apache2, apache2-tls13

Security update for apache2

io.projectreactor.netty:reactor-netty-http, io.projectreactor.netty:reactor-netty-http

In Reactor Netty HTTP Server a malicious user can send a request using a specially crafted URL that can lead to a directory traversal attack

lfest-main

`lfest-main` was removed from crates.io for malicious code

lasso-rs

`lasso-rs` was removed from crates.io for malicious code

win-crypto

`win-crypto` was removed from crates.io for malicious code

monero-api

`monero-api` was removed from crates.io for malicious code

monero-rpc-rs

`monero-rpc-rs` was removed from crates.io for malicious code

win-base64-rs

`win-base64-rs` was removed from crates.io for malicious code

acceptxmr-rs

`acceptxmr-rs` was removed from crates.io for malicious code

registry-win

`registry-win` was removed from crates.io for malicious code

win_run_rs

`win_run_rs` was removed from crates.io for malicious code

windows-service-rs

`windows-service-rs` was removed from crates.io for malicious code

libusb1-main

`libusb1-main` was removed from crates.io for malicious code

winx-rs

`winx-rs` was removed from crates.io for malicious code

tomcat, tomcat

Updated tomcat packages fix security vulnerabilities

freerdp, freerdp

Updated freerdp packages fix security vulnerabilities

python-pip, python-pip, python-pip, python-pip

python-pip vulnerabilities

jhead, jhead

Security update for jhead

check-mk, check-mk

DoS via long hostnames

exfatprogs, exfatprogs, exfatprogs, exfatprogs

Security update for exfatprogs

ffmpeg, ffmpeg, ffmpeg

ffmpeg regression