Open Source Vulnerabilities

spip, spip, spip, spip, spip, spip, spip

symfony, symfony, symfony, symfony, symfony, symfony, symfony

freerdp, freerdp

freerdp, freerdp

freerdp, freerdp

freerdp, freerdp

libsql-abstract-perl, libsql-abstract-perl, libsql-abstract-perl, libsql-abstract-perl, libsql-abstract-perl, libsql-abstract-perl, libsql-abstract-perl

libsql-abstract-perl, libsql-abstract-perl, libsql-abstract-perl, libsql-abstract-perl, libsql-abstract-perl, libsql-abstract-perl, libsql-abstract-perl

libsql-abstract-perl, libsql-abstract-perl, libsql-abstract-perl, libsql-abstract-perl, libsql-abstract-perl, libsql-abstract-perl, libsql-abstract-perl

ofono, ofono, ofono, ofono, ofono, ofono, ofono

ofono, ofono, ofono, ofono, ofono, ofono, ofono

ofono, ofono, ofono, ofono, ofono, ofono, ofono

ofono, ofono, ofono, ofono, ofono, ofono, ofono

ofono, ofono, ofono, ofono, ofono, ofono, ofono

ofono, ofono, ofono, ofono, ofono, ofono, ofono

koji, koji

pagure, pagure, pagure, pagure

freerdp, freerdp

zbar, zbar, zbar, zbar, zbar, zbar, zbar, zbar

symfony, symfony, symfony, symfony, symfony, symfony, symfony

iwd, iwd, iwd, iwd, iwd

libweb-simple-perl, libweb-simple-perl, libweb-simple-perl, libweb-simple-perl, libweb-simple-perl, libweb-simple-perl, libweb-simple-perl

jackson-dataformat-cbor, jackson-dataformat-cbor, jackson-dataformat-cbor, jackson-dataformat-cbor, jackson-dataformat-cbor, jackson-dataformat-cbor, jackson-dataformat-cbor

git, git, git, git, git, git, git

Pixar Animation Studio OpenUSD Crate File Parsing Double Free Remote Code Execution Vulnerability

libwebsockets MQTT Protocol PUBACK Packet Handling Out-Of-Bounds Write Remote Code Execution Vulnerability

spatie url-signer URL Validation AbstractUrlSigner.php validate type conversion

CGI versions before 5.00 for Perl allow an infinite loop on a short request body when $DISABLE_UPLOADS is set

CGI versions before 5.00 for Perl allow memory, CPU and disk exhaustion via missing or unenforced request size, parameter and upload limits

CGI versions before 5.00 for Perl allow HTML injection via text containing --> in comment

CGI versions before 5.00 for Perl allow Content-Disposition parameter injection via unescaped double quotes in the header attachment filename

CGI versions from 4.71 before 5.00 for Perl allow denial of service via a plain string dereferenced as a symbolic reference in uploadInfo

CGI versions before 5.00 for Perl allow denial of service via submitted values used as a regex for optgroup selection in scrolling_list

CGI::Cookie versions before 5.00 for Perl allow cookie attribute injection via unvalidated path, domain and expires values

CGI versions from 4.62 before 5.00 for Perl allow cross-site scripting via a raw apostrophe in URLs returned by url and self_url

CGI versions before 5.00 for Perl return request-derived values untainted under taint mode

CGI versions before 5.00 for Perl return upload filenames with any client-supplied path, including ../ and Windows paths

CGI versions before 5.00 for Perl allow the POSTDATA, PUTDATA, PATCHDATA and XForms:Model parameters to be set from the query string or form fields

CGI versions before 5.00 for Perl allow HTTP header injection via entity decoding after the newline check in header and unchecked values in multipart_start and do_push

CGI versions before 5.00 for Perl allow open redirects via HTML entity decoding of the URL after application validation in redirect

CGI versions before 5.00 for Perl take request parameters from the process command line arguments for an unrecognised REQUEST_METHOD

CGI versions before 5.00 for Perl allow open redirects and script injection via URLs built from REQUEST_URI in url and start_form

CGI versions before 5.00 for Perl allow form fields to be smuggled past proxies and WAFs via multipart parsing that differs from the RFCs

CGI::Carp versions before 5.00 for Perl leak warnings across requests in persistent environments via the warningsToBrowser buffer

CGI versions before 5.00 for Perl trust the client X-Forwarded-Host header in url, self_url, virtual_host and virtual_port

CGI versions before 5.00 for Perl allow CPU exhaustion via a backtracking regex on the XForms multipart/related Content-Type

CGI::Cookie versions from 4.67 before 5.00 for Perl allow denial of service via the client cookie expires value used as a regex in parse

InfiniFlow RAGFlow Text To SQL Retrieval sql.go RunSQL authorization

kore, kore

moby-engine

CVE-2026-121520 affecting package moby-engine 25.0.18-1