Open Source Vulnerabilities

,

postgresql-13

postgresql-13 - security update

postgresql-15

postgresql-15 - security update

WordPress Quiz And Survey Master Plugin <= 8.0.10 is vulnerable to Cross Site Request Forgery (CSRF)

statamic/cms, statamic/cms

Statamic CMS remote code execution via front-end form uploads

piccolo

piccolo SQL Injection via named transaction savepoints

github.com/consensys/gnark

gnark's range checker gadget allows wider inputs up to word alignment

go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc

otelgrpc DoS vulnerability due to unbound cardinality metrics

symfony/webhook, symfony/symfony

Symfony potential Cross-site Scripting in WebhookController

symfony/twig-bridge, symfony/twig-bridge, symfony/twig-bridge, symfony/symfony, symfony/symfony, symfony/symfony

Symfony potential Cross-site Scripting vulnerabilities in CodeExtension filters

symfony/security-http, symfony/security-http, symfony/symfony, symfony/symfony

Symfony possible session fixation vulnerability

apache-airflow

Apache Airflow allows authenticated and DAG-view authorized users to modify some DAG run detail values when submitting notes

apache-airflow

Apache Airflow vulnerable to Exposure of Sensitive Information to an Unauthorized Actor

apache-airflow

apache-airflow

Apache Airflow: Permission verification bypass allows viewing dagruns of other dags

Apache Airflow missing fix for CVE-2023-40611 in 2.7.1 (DAG run broken access)

matio

Heap-buffer-overflow in H5MM_strdup

vlc, vlc

Security update for vlc

vlc, vlc

Security update for vlc

quictls

Updated quictls packages fix a security vulnerability

vorbis-tools, vorbis-tools

Updated vorbis-tools packages fix a security vulnerability

ffmpeg

ffmpeg - security update

audiofile

audiofile - security update

nghttp2

Important: nghttp2 security update

firefox

Important: firefox security update

toolbox

Moderate: toolbox security update