Open Source Vulnerabilities

stdlib

Incorrect detection of reserved device names on Windows in path/filepath

stdlib, stdlib

Insecure parsing of Windows paths with a \??\ prefix in path/filepath

DLL Search Order Hijacking vulnerability in BleachBit for Windows

Ethyca Fides HTML Injection Vulnerability in HTML-Formatted DSR Packages

ZITADEL race condition in lockout policy execution

PrestaShop blockreassurance BO User can remove any file from server when adding a and deleting a block

axios, axios

Axios Cross-Site Request Forgery Vulnerability

jbig2enc, jbig2enc

jbig2enc, jbig2enc

node-axios, node-axios, node-axios

jbig2enc, jbig2enc, jbig2enc, jbig2enc

node-axios, node-axios, node-axios, node-axios, node-axios, node-axios

jbig2enc, jbig2enc, jbig2enc, jbig2enc

couchbase

chromium, chromium, chromium

github.com/slsa-framework/slsa-verifier/v2, github.com/slsa-framework/slsa-verifier

slsa-verifier vulnerable to mproper validation of npm's publish attestations

idle-python3.6, libpython3.6, libpython3.6-dev, libpython3.6-minimal, libpython3.6-stdlib, libpython3.6-testsuite, python3.6, python3.6-dev, python3.6-doc, python3.6-examples, python3.6-minimal, python3.6-venv

Fix CVE(s): CVE-2022-48560

ntp, ntp-doc, ntpdate, sntp

Fix CVE(s): CVE-2018-12327

exim4, exim4-base, exim4-config, exim4-daemon-heavy, exim4-daemon-light, exim4-dev, eximon4

Fix CVE(s): CVE-2023-42119

microweber/microweber

Microweber Cross-site Scripting vulnerability

vim, vim-athena, vim-athena-py2, vim-common, vim-doc, vim-gnome, vim-gnome-py2, vim-gtk, vim-gtk-py2, vim-gtk3, vim-gtk3-py2, vim-gui-common, vim-nox, vim-nox-py2, vim-runtime, vim-tiny

Fix CVE(s): CVE-2023-0288, CVE-2023-0054