Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    DLA-3161-1
    Fix available
    Packages

    tzdata

    Summary

    tzdata - new timezone database

    Published
    26 Oct 2022
    USN-5699-1
    Fix available
    Packages

    glibc

    Summary

    glibc vulnerabilities

    Published
    25 Oct 2022
    GHSA-cr84-xvw4-qx3c
    Fix available
    Packages

    shescape

    Summary

    Inefficient Regular Expression Complexity in shescape

    Published
    25 Oct 2022
    GHSA-hhc4-47rh-cr34
    Fix available
    Packages

    evm

    Summary

    Incorrect is_static parameter for custom stateful precompiles in SputnikVM (evm)

    Published
    25 Oct 2022
    CVE-2022-33185
    No fix available
    Packages

    Summary

    Published
    25 Oct 2022
    CVE-2022-33184
    No fix available
    Packages

    Summary

    Published
    25 Oct 2022
    CVE-2022-33183
    No fix available
    Packages

    Summary

    Published
    25 Oct 2022
    CVE-2022-33182
    No fix available
    Packages

    Summary

    Published
    25 Oct 2022
    CVE-2022-33181
    No fix available
    Packages

    Summary

    Published
    25 Oct 2022
    CVE-2022-33180
    No fix available
    Packages

    Summary

    Published
    25 Oct 2022
    CVE-2022-33179
    No fix available
    Packages

    Summary

    Published
    25 Oct 2022
    CVE-2022-33178
    No fix available
    Packages

    Summary

    Published
    25 Oct 2022
    CVE-2022-28170
    No fix available
    Packages

    Summary

    Published
    25 Oct 2022
    CVE-2022-28169
    No fix available
    Packages

    Summary

    Published
    25 Oct 2022
    GHSA-7gc4-r5jr-9hxv
    Fix available
    Packages

    github.com/flipped-aurora/gin-vue-admin/server

    Summary

    Gin-vue-admin subject to Remote Code Execution via file upload vulnerability

    Published
    25 Oct 2022
    GHSA-f2rj-m42r-6jm2
    Fix available
    Packages

    github.com/zalando/skipper

    Summary

    Skipper vulnerable to SSRF via X-Skipper-Proxy

    Published
    25 Oct 2022
    GHSA-fc4h-xcf3-qj5f
    Fix available
    Packages

    matrix-sdk

    Summary

    matrix-sdk 0.6.0 logs access tokens

    Published
    25 Oct 2022
    GHSA-c33w-pm52-mqvf
    Fix available
    Packages

    @dependencytrack/frontend

    Summary

    @dependencytrack/frontend vulnerable to Persistent Cross-Site-Scripting via Vulnerability Details

    Published
    25 Oct 2022
    GHSA-vj4m-83m8-xpw5
    Fix available
    Packages

    github.com/openfga/openfga

    Summary

    OpenFGA Authorization Bypass via tupleset wildcard

    Published
    25 Oct 2022
    GHSA-f4mm-2r69-mg5f
    Fix available
    Packages

    github.com/openfga/openfga

    Summary

    OpenFGA Authorization Bypass

    Published
    25 Oct 2022
    GHSA-95x7-mh78-7w2r
    Fix available
    Packages

    github.com/openfga/openfga

    Summary

    OpenFGA subject to Information Disclosure via streamed-list-objects endpoint

    Published
    25 Oct 2022
    GHSA-47xc-9rr2-q7p4
    Fix available
    Packages

    azure-cli

    Summary

    Improper Control of Generation of Code ('Code Injection') in Azure CLI

    Published
    25 Oct 2022
    GHSA-2c6m-6gqh-6qg3
    Fix available
    Packages

    actions/runner, actions/runner, actions/runner, actions/runner, actions/runner

    Summary

    Docker Command Escaping in the GitHub Actions Runner

    Published
    25 Oct 2022
    CVE-2022-38181
    No fix available
    Packages

    Summary

    Published
    25 Oct 2022
    CVE-2022-39354
    Fix available
    Packages

    Summary

    Published
    25 Oct 2022
    CVE-2022-36452
    No fix available
    Packages

    Summary

    Published
    25 Oct 2022
    CVE-2022-31468
    No fix available
    Packages

    Summary

    Published
    25 Oct 2022
    CVE-2022-27913
    No fix available
    Packages

    Summary

    Published
    25 Oct 2022
    CVE-2022-27912
    No fix available
    Packages

    Summary

    Published
    25 Oct 2022
    GHSA-r29w-r9ph-vm76
    Fix available
    Packages

    org.apache.xmlgraphics:batik

    Summary

    Apache XML Graphics Batik vulnerable to code execution via SVG.

    Published
    25 Oct 2022
    GHSA-rwqr-m72q-v6cm
    Fix available
    Packages

    org.apache.xmlgraphics:batik, org.apache.xmlgraphics:batik-bridge

    Summary

    Untrusted code execution in Apache XML Graphics Batik

    Published
    25 Oct 2022
    GHSA-373r-9mg8-3jc4
    Fix available
    Packages

    org.apache.geode:geode-core

    Summary

    Apache Geode vulnerable to Cross-Site Scripting

    Published
    25 Oct 2022
    GHSA-qv37-mfjf-42h8
    Fix available
    Packages

    pulp-ansible

    Summary

    Plaintext storage of tokens in pulp_ansible

    Published
    25 Oct 2022
    CVE-2022-36454
    No fix available
    Packages

    Summary

    Published
    25 Oct 2022
    CVE-2022-36453
    No fix available
    Packages

    Summary

    Published
    25 Oct 2022
    CVE-2022-36451
    No fix available
    Packages

    Summary

    Published
    25 Oct 2022
    GHSA-rh58-r7jh-xhx3
    Fix available
    Packages

    Microsoft.NETCore.App.Runtime.win-x86, Microsoft.NETCore.App.Runtime.win-x86, Microsoft.NETCore.App.Runtime.win-x64, Microsoft.NETCore.App.Runtime.win-x64, Microsoft.NETCore.App.Runtime.win-arm64, Microsoft.NETCore.App.Runtime.win-arm64, Microsoft.NETCore.App.Runtime.win-arm, Microsoft.NETCore.App.Runtime.win-arm, Microsoft.NETCore.App.Runtime.osx-x64, Microsoft.NETCore.App.Runtime.osx-x64, Microsoft.NETCore.App.Runtime.Mono.osx-x64, Microsoft.NETCore.App.Runtime.Mono.LLVM.osx-x64, Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-x64, Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-arm64, Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.osx-x64, Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-x64, Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-arm64, Microsoft.NETCore.App.Runtime.Mono.linux-x64, Microsoft.NETCore.App.Runtime.Mono.linux-musl-x64, Microsoft.NETCore.App.Runtime.Mono.linux-arm64, Microsoft.NETCore.App.Runtime.Mono.linux-arm, Microsoft.NETCore.App.Runtime.linux-x64, Microsoft.NETCore.App.Runtime.linux-x64, Microsoft.NETCore.App.Runtime.linux-musl-x64, Microsoft.NETCore.App.Runtime.linux-musl-x64, Microsoft.NETCore.App.Runtime.linux-musl-arm64, Microsoft.NETCore.App.Runtime.linux-musl-arm64, Microsoft.NETCore.App.Runtime.linux-musl-arm, Microsoft.NETCore.App.Runtime.rhel.6-x64, Microsoft.NETCore.App.Runtime.linux-arm64, Microsoft.NETCore.App.Runtime.linux-arm64, Microsoft.NETCore.App.Runtime.linux-arm, Microsoft.NETCore.App.Runtime.linux-arm

    Summary

    .NET Core Elevation of Privilege Vulnerability

    Published
    25 Oct 2022
    DEBIAN-CVE-2022-42890
    Fix available
    Packages

    batik, batik, batik

    Summary

    Published
    25 Oct 2022
    DEBIAN-CVE-2022-41704
    Fix available
    Packages

    batik, batik, batik

    Summary

    Published
    25 Oct 2022
    CVE-2022-3395
    No fix available
    Packages

    Summary

    Published
    25 Oct 2022
    CVE-2022-3394
    No fix available
    Packages

    Summary

    Published
    25 Oct 2022
    CVE-2022-3393
    No fix available
    Packages

    Summary

    Published
    25 Oct 2022
    CVE-2022-3392
    No fix available
    Packages

    Summary

    Published
    25 Oct 2022
    CVE-2022-3391
    No fix available
    Packages

    Summary

    Published
    25 Oct 2022
    CVE-2022-3350
    No fix available
    Packages

    Summary

    Published
    25 Oct 2022
    DEBIAN-CVE-2022-3344
    Fix available
    Packages

    linux, linux, linux

    Summary

    Published
    25 Oct 2022
    CVE-2022-3344
    No fix available
    Packages

    Summary

    Published
    25 Oct 2022
    CVE-2022-3335
    No fix available
    Packages

    Summary

    Published
    25 Oct 2022
    AZL-11352
    Fix available
    Packages

    kernel

    Summary

    CVE-2022-3344 affecting package kernel for versions less than 5.15.82.1-1

    Published
    25 Oct 2022
    CVE-2022-3302
    No fix available
    Packages

    Summary

    Published
    25 Oct 2022