Open Source Vulnerabilities

binutils, binutils, binutils, binutils, binutils

curl

curl

qtwebkit-opensource-src, webkit2gtk, qtwebkit-source, webkitgtk, webkit2gtk, qtwebkit-opensource-src, qtwebkit-source, webkitgtk, webkit2gtk, qtwebkit-opensource-src, wpewebkit, qtwebkit-opensource-src, webkit2gtk, wpewebkit, qtwebkit-opensource-src

nss, nss, firefox, nss, thunderbird, mozjs52, mozjs38, firefox, nss, thunderbird, mozjs68, mozjs52, mozjs78, mozjs91, nss, thunderbird

php5, php7.0, php7.2, php7.4, php8.1

thunderbird, thunderbird, thunderbird

curl, curl, curl

firefox, mozjs52, mozjs38, firefox, mozjs68, mozjs52, mozjs78, mozjs91

firefox, mozjs52, mozjs38, firefox, mozjs68, mozjs52, mozjs78, mozjs91

ffmpeg, ffmpeg

Updated ffmpeg packages fix security vulnerability

chromium-browser-stable

Updated chromium-browser-stable packages fix security vulnerability

apr-util

Updated apr-util packages fix security vulnerability

libzen

Updated libzen packages fix security vulnerability

webkit2

Updated webkit2 packages fix security vulnerability

editorconfig-core-c

Updated editorconfig-core-c packages fix security vulnerability

phpmyadmin

Updated phpmyadmin packages fix security vulnerability

tpm2-tss

Updated tpm2-tss packages fix security vulnerability

Microsoft.NetCore.App.Runtime.win-arm, Microsoft.NetCore.App.Runtime.win-arm, Microsoft.NetCore.App.Runtime.win-arm64, Microsoft.NetCore.App.Runtime.win-arm64, Microsoft.NetCore.App.Runtime.win-x64, Microsoft.NetCore.App.Runtime.win-x64, Microsoft.NetCore.App.Runtime.win-x86, Microsoft.NetCore.App.Runtime.win-x86

.NET Remote Code Execution Vulnerability

cortex-m-rt

Miscompilation in cortex-m-rt 0.7.1 and 0.7.2

@fastify/multipart, @fastify/multipart

Denial of service due to unlimited number of parts

@backstage/core-components, @backstage/catalog-model, @backstage/plugin-catalog-backend

Cross site scripting Vulnerability in backstage Software Catalog

starlette

MultipartParser denial of service with too many fields or files

Git for Windows' installer is susceptible to DLL side loading attacks

gitk can inadvertently call executables in the worktree

python-werkzeug, python-werkzeug, python-werkzeug

git, git, git

git, git, git, git, git, git, git, git, git, git, git

python-werkzeug, python-werkzeug, python-werkzeug

python-werkzeug

CVE-2023-25577 affecting package python-werkzeug for versions less than 2.0.3-2

python-werkzeug

CVE-2023-23934 affecting package python-werkzeug for versions less than 2.2.3-1

git, git, git

git, git, git, git, git, git, git, git, git, git, git