Open Source Vulnerabilities

skia

Use-of-uninitialized-value in SkFindQuadMaxCurvature

skia

Heap-buffer-overflow in SkPath::reverseAddPath

skia

Heap-buffer-overflow in SkPath::Iter::next

ec-cube/ec-cube

EC-CUBE DOM-based cross-site scripting vulnerability

strapi, @strapi/strapi

Strapi mishandles hidden attributes within admin API responses

ec-cube/ec-cube, ec-cube/ec-cube

EC-CUBE Directory traversal vulnerability

skia

Heap-buffer-overflow in SkMatrix::Persp_pts

chromium

chromium - security update

lighttpd

lighttpd - security update

maven-shared-utils

maven-shared-utils - security update

wpewebkit

wpewebkit - security update

webkit2gtk

webkit2gtk - security update

Matrix Javascript SDK vulnerable to Olm/Megolm protocol confusion

Matrix Javascript SDK improper beacon events can cause availability issues

firefox, thunderbird, firefox, thunderbird, thunderbird

firefox, thunderbird, mozjs52, mozjs38, firefox, thunderbird, mozjs68, mozjs52, mozjs78, mozjs91, thunderbird

firefox, thunderbird, firefox, thunderbird, thunderbird

firefox, thunderbird, firefox, thunderbird, thunderbird

firefox, thunderbird, firefox, thunderbird, thunderbird

firefox, thunderbird, mozjs52, mozjs38, firefox, thunderbird, mozjs68, mozjs52, mozjs78, mozjs91, thunderbird

firefox, thunderbird, firefox, thunderbird, thunderbird

nheko vulnerable to secret poisoning using MITM on secret requests by the homeserver

Twig may load a template outside a configured directory when using the filesystem loader

Matrix Javascript SDK vulnerable to impersonation via forwarded Megolm sessions

vim, vim, vim

linux, linux, linux

gajim, gajim, gajim

vim

CVE-2022-3324 affecting package vim for versions less than 9.0.0614-1

kernel

CVE-2022-3303 affecting package kernel for versions less than 5.15.70.1-1