Open Source Vulnerabilities

hunspell

Use-of-uninitialized-value in SfxEntry::test_condition

wasm3

Heap-use-after-free in AcquireCodePageWithCapacity

h3

Global-buffer-overflow in _getBaseCellNeighbor

Apache Calcite: potential XEE attacks

linux-5.10

linux-5.10 - new package

gdk-pixbuf

gdk-pixbuf - security update

jupyter-notebook, python-send2trash, python-nest-asyncio

Updated jupyter-notebook packages fix security vulnerability

rpm

Updated rpm packages fix security vulnerability

gstreamer1.0-plugins-good

Updated gstreamer1.0-plugins-good packages fix security vulnerability

kernel, kmod-virtualbox, kmod-xtables-addons

Updated kernel packages fix security vulnerabilities

fluent-bit

Heap-double-free in flb_sds_destroy

lcms

UNKNOWN WRITE in from8to16

appwrite/server-ce

Appwrite Vulnerable to Cross-site Scripting

pdfkit

PDFKit vulnerable to Command Injection

hunspell

Stack-buffer-overflow in PfxEntry::test_condition

rankmath/seo-by-rank-math

Rank Math SEO plugin vulnerable to Server-Side Request Forgery

apache-commons-configuration

Security exception in java.base/java.util.Collections$UnmodifiableCollection.forEach

markdown-nice

Markdown-Nice v1.8.22 vulnerable to Cross-site Scripting

github.com/casdoor/casdoor

Casdoor arbitrary file write vulnerability

hunspell

Heap-buffer-overflow in AffixMgr::redundant_condition

leptonlib, leptonlib, leptonlib

libitext-java, libitext-java, libitext-java, libitext1-java, libitext5-java, libitext5-java, libitext5-java, pdftk, pdftk-java, pdftk-java, pdftk-java

libitext-java, libitext5-java, libitext-java, libitext5-java, libitext-java, libitext5-java, pdftk-java, libitext-java, libitext5-java, pdftk-java, libitext-java, libitext5-java, libitext-java, libitext5-java, libitext-java, libitext5-java, libitext-java, libitext5-java

leptonlib, tesseract, leptonlib, tesseract, leptonlib, tesseract

libconfuse, libconfuse, libconfuse

python-oauthlib, python-oauthlib, python-oauthlib

libconfuse

CVE-2022-40320 affecting package libconfuse for versions less than 3.3-2

libconfuse

CVE-2022-40320 affecting package libconfuse for versions less than 3.3-2

oauthlib

python-oauthlib

libconfuse, libconfuse, libconfuse, libconfuse, libconfuse

casdoor

github.com/goharbor/harbor, github.com/goharbor/harbor, github.com/goharbor/harbor

Harbor fails to validate the user permissions when reading job execution logs through the P2P preheat execution logs

Netmaker vulnerable to Insufficient Granularity of Access Control

indy-node

Hyperledger Indy DOS vulnerability

docker.io, docker.io, docker.io

man2html, man2html, man2html

man2html, man2html, man2html

man2html, man2html, man2html, man2html, man2html, man2html, man2html, man2html

man2html, man2html, man2html, man2html, man2html, man2html, man2html, man2html

docker.io, docker.io, docker.io, docker.io

OS Command Injection in jgraph/drawio