Open Source Vulnerabilities

Access Control Bypass in Onedev

golang-1.19

Parsing issue in matrix-org/node-irc leading to room takeovers

IRC mode parameter confusion in matrix-appservice-irc

github.com/open-policy-agent/opa

Protection bypass in github.com/open-policy-agent/opa

User Enumeration via Response Timing in TYPO3

Missing check for expiration time of password reset token in TYPO3

Stored Cross-Site Scripting via FileDumpController

Denial of Service via Page Error Handling in TYPO3/cms

Cross-Site Scripting in typo3/cms-core

rdiffweb

Talos worker join token can be used to get elevated access level to the Talos API

Bypass of Cross-Site Scripting Protection in typo3/html-sanitizer

dpdk, dpdk, dpdk

dpdk vulnerability

Weak Password Requirements in ikus060/rdiffweb

kernel

CVE-2022-3170 affecting package kernel for versions less than 5.15.70.1-1

linux-raspi2

wireshark, wireshark, wireshark

wireshark

CVE-2022-3190 affecting package wireshark for versions less than 3.4.16-1

wireshark

gdk-pixbuf, gdk-pixbuf

gdk-pixbuf vulnerability

golang-github-containers-buildah, golang-github-containers-buildah, golang-github-containers-buildah

libpod

podman

CVE-2022-2989 affecting package podman for versions less than 4.1.1-21

buildah

CVE-2022-2990 affecting package buildah for versions less than 1.18.0-24

podman

CVE-2022-2989 affecting package podman for versions less than 4.1.1-10

buildah

CVE-2022-2990 affecting package buildah for versions less than 1.18.0-17

golang-github-containers-buildah, golang-github-containers-buildah, golang-github-containers-buildah, golang-github-containers-buildah, golang-github-containers-buildah

libpod, libpod