Open Source Vulnerabilities

prestashop/blockreassurance

PrestaShop blockreassurance BO User can remove any file from server when adding a and deleting a block

github.com/zitadel/zitadel, github.com/zitadel/zitadel

ZITADEL race condition in lockout policy execution

ethyca-fides

Ethyca Fides HTML Injection Vulnerability in HTML-Formatted DSR Packages

WordPress Simple User Listing Plugin <= 1.9.2 is vulnerable to Cross Site Scripting (XSS)

PILOS account takeover through password reset poisoning

drupal/graphql

drupal/graphql

Group-based JIT MFA bypass on scp and sftp in The Bastion

s2n-quic

s2n-quic potential denial of service via crafted stream frames

github.com/sigstore/cosign, github.com/sigstore/cosign/v2

Cosign vulnerable to possible endless data attack from attacker-controlled registry

org.xwiki.platform:xwiki-platform-flamingo-skin-resources, org.xwiki.platform:xwiki-platform-flamingo-skin-resources

XWiki Platform vulnerable to reflected cross-site scripting through revision parameter in content menu

org.xwiki.platform:xwiki-platform-administration-ui, org.xwiki.platform:xwiki-platform-administration-ui, org.xwiki.platform:xwiki-platform-administration

XWiki Platform vulnerable to remote code execution through the section parameter in Administration as guest

xrdp, xrdp, xrdp, xrdp, xrdp

xrdp vulnerabilities

opensc

Heap-buffer-overflow in iasecc_parse_acls

lcms

UNKNOWN READ in cmsIT8GetDataRowColDbl

openssl, openssl-devel, openssl-libs, openssl-perl, openssl-static

openssl: Fix of CVE-2021-3711

squid, squid, squid, squid, squid, squid, squid, squid, squid, squid, squid

Security update for squid