Open Source Vulnerabilities

tor, tor, tor, tor

Security update for tor

froxlor/froxlor

Froxlor Improper Input Validation vulnerability

Sentry Next.js vulnerable to SSRF via Next.js SDK tunnel endpoint

Improper Link Resolution Before File Access in froxlor/froxlor

squid

Updated squid packages fix security vulnerabilities

vim, vim

Updated vim packages fix a security vulnerability

moodle, moodle

@sentry/nextjs

Sentry Next.js vulnerable to SSRF via Next.js SDK tunnel endpoint

Moodle: duplicating a bigbluebutton activity assigns the same meeting id

github.com/hashicorp/vault, github.com/hashicorp/vault, github.com/hashicorp/vault

HashiCorp Vault Missing Release of Memory after Effective Lifetime vulnerability

moodle/moodle

Moodle Exposure of Sensitive Information to an Unauthorized Actor vulnerability

moodle/moodle, moodle/moodle, moodle/moodle, moodle/moodle, moodle/moodle, moodle/moodle

Moodle Code Injection vulnerability

moodle/moodle

Moodle Cross-site Scripting vulnerability

moodle/moodle

Moodle Acceptance of Extraneous Untrusted Data With Trusted Data vulnerability

moodle/moodle

Moodle Improper Access Control vulnerability

moodle/moodle

Moodle Cross-site Scripting vulnerability

moodle/moodle, moodle/moodle, moodle/moodle, moodle/moodle, moodle/moodle, moodle/moodle

Moodle Exposure of Sensitive Information to an Unauthorized Actor vulnerability

moodle/moodle

Moodle Cross-site Scripting vulnerability

moodle/moodle

Moodle Code Injection vulnerability

moodle/moodle

Moodle Cross-site Scripting vulnerability

moodle/moodle

Moodle Improper Access Control vulnerability

moodle/moodle

Moodle Code Injection vulnerability