Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    GHSA-2m65-m22p-9wjw
    Fix available
    Packages

    System.Security.Cryptography.Xml, System.Security.Cryptography.Xml, Microsoft.AspNetCore.App.Runtime.win-x64, Microsoft.AspNetCore.App.Runtime.win-x64, Microsoft.AspNetCore.App.Runtime.linux-x64, Microsoft.AspNetCore.App.Runtime.linux-x64, Microsoft.AspNetCore.App.Runtime.win-x86, Microsoft.AspNetCore.App.Runtime.win-x86, Microsoft.AspNetCore.App.Runtime.osx-x64, Microsoft.AspNetCore.App.Runtime.osx-x64, Microsoft.AspNetCore.App.Runtime.linux-musl-x64, Microsoft.AspNetCore.App.Runtime.linux-musl-x64, Microsoft.AspNetCore.App.Runtime.linux-arm64, Microsoft.AspNetCore.App.Runtime.linux-arm64, Microsoft.AspNetCore.App.Runtime.linux-arm, Microsoft.AspNetCore.App.Runtime.linux-arm, Microsoft.AspNetCore.App.Runtime.win-arm64, Microsoft.AspNetCore.App.Runtime.win-arm64, Microsoft.AspNetCore.App.Runtime.win-arm, Microsoft.AspNetCore.App.Runtime.win-arm, Microsoft.AspNetCore.App.Runtime.linux-musl-arm64, Microsoft.AspNetCore.App.Runtime.linux-musl-arm64, Microsoft.AspNetCore.App.Runtime.linux-musl-arm, Microsoft.AspNetCore.App.Runtime.linux-musl-arm

    Summary

    Duplicate Advisory: .NET Information Disclosure Vulnerability

    Published
    10 Aug 2022
    CVE-2022-28129
    No fix available
    Packages

    Summary

    Insufficient Validation of HTTP/1.x Headers

    Published
    10 Aug 2022
    CVE-2022-31780
    No fix available
    Packages

    Summary

    HTTP/2 framing vulnerabilities

    Published
    10 Aug 2022
    CVE-2022-31778
    No fix available
    Packages

    Summary

    Transfer-Encoding not treated as hop-by-hop

    Published
    10 Aug 2022
    ALSA-2022:6043
    Fix available
    Packages

    aspnetcore-runtime-6.0, aspnetcore-targeting-pack-6.0, dotnet-apphost-pack-6.0, dotnet-host, dotnet-hostfxr-6.0, dotnet-runtime-6.0, dotnet-sdk-6.0, dotnet-sdk-6.0-source-built-artifacts, dotnet-targeting-pack-6.0, dotnet-templates-6.0, netstandard-targeting-pack-2.1

    Summary

    Moderate: .NET 6.0 security, bug fix, and enhancement update

    Published
    10 Aug 2022
    USN-5557-1
    Fix available
    Packages

    linux-aws, linux-lts-xenial, linux, linux-aws, linux-kvm

    Summary

    linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities

    Published
    9 Aug 2022
    GSD-2022-1004953
    No fix available
    Packages

    Summary

    DNS hijack in Smart contract version website serving smartcontract on 2022-08-09

    Published
    9 Aug 2022
    GO-2022-0203
    Fix available
    Packages

    toolchain

    Summary

    Remote command execution via "go get" command with "-insecure" option in cmd/go

    Published
    9 Aug 2022
    CVE-2022-29083
    No fix available
    Packages

    Summary

    Published
    9 Aug 2022
    CVE-2022-32148
    Fix available
    Packages

    Summary

    Exposure of client IP addresses in net/http

    Published
    9 Aug 2022
    CVE-2022-1962
    Fix available
    Packages

    Summary

    Stack exhaustion due to deeply nested types in go/parser

    Published
    9 Aug 2022
    CVE-2022-2719
    Fix available
    Packages

    Summary

    Published
    9 Aug 2022
    CVE-2022-30580
    Fix available
    Packages

    Summary

    Empty Cmd.Path can trigger unintended binary in os/exec on Windows

    Published
    9 Aug 2022
    CVE-2022-32189
    Fix available
    Packages

    Summary

    Panic when decoding Float and Rat types in math/big

    Published
    9 Aug 2022
    CVE-2022-30629
    Fix available
    Packages

    Summary

    Session tickets lack random ticket_age_add in crypto/tls

    Published
    9 Aug 2022
    CVE-2022-30630
    Fix available
    Packages

    Summary

    Stack exhaustion in Glob on certain paths in io/fs

    Published
    9 Aug 2022
    CVE-2022-1705
    Fix available
    Packages

    Summary

    Improper sanitization of Transfer-Encoding headers in net/http

    Published
    9 Aug 2022
    CVE-2022-30631
    Fix available
    Packages

    Summary

    Stack exhaustion when reading certain archives in compress/gzip

    Published
    9 Aug 2022
    CVE-2022-30633
    Fix available
    Packages

    Summary

    Stack exhaustion when unmarshaling certain documents in encoding/xml

    Published
    9 Aug 2022
    CVE-2022-30635
    Fix available
    Packages

    Summary

    Stack exhaustion when decoding certain messages in encoding/gob

    Published
    9 Aug 2022
    CVE-2022-30632
    Fix available
    Packages

    Summary

    Stack exhaustion on crafted paths in path/filepath

    Published
    9 Aug 2022
    CVE-2022-35827
    No fix available
    Packages

    Summary

    Published
    9 Aug 2022
    CVE-2022-35826
    No fix available
    Packages

    Summary

    Published
    9 Aug 2022
    CVE-2022-35825
    No fix available
    Packages

    Summary

    Published
    9 Aug 2022
    CVE-2022-35824
    No fix available
    Packages

    Summary

    Published
    9 Aug 2022
    CVE-2022-35821
    No fix available
    Packages

    Summary

    Published
    9 Aug 2022
    CVE-2022-35820
    No fix available
    Packages

    Summary

    Published
    9 Aug 2022
    CVE-2022-35819
    No fix available
    Packages

    Summary

    Published
    9 Aug 2022
    CVE-2022-35818
    No fix available
    Packages

    Summary

    Published
    9 Aug 2022
    CVE-2022-35817
    No fix available
    Packages

    Summary

    Published
    9 Aug 2022
    CVE-2022-35816
    No fix available
    Packages

    Summary

    Published
    9 Aug 2022
    CVE-2022-35815
    No fix available
    Packages

    Summary

    Published
    9 Aug 2022
    CVE-2022-35814
    No fix available
    Packages

    Summary

    Published
    9 Aug 2022
    CVE-2022-35813
    No fix available
    Packages

    Summary

    Published
    9 Aug 2022
    CVE-2022-35812
    No fix available
    Packages

    Summary

    Published
    9 Aug 2022
    CVE-2022-35811
    No fix available
    Packages

    Summary

    Published
    9 Aug 2022
    CVE-2022-35810
    No fix available
    Packages

    Summary

    Published
    9 Aug 2022
    CVE-2022-35809
    No fix available
    Packages

    Summary

    Published
    9 Aug 2022
    CVE-2022-35808
    No fix available
    Packages

    Summary

    Published
    9 Aug 2022
    CVE-2022-35807
    No fix available
    Packages

    Summary

    Published
    9 Aug 2022
    CVE-2022-35802
    No fix available
    Packages

    Summary

    Published
    9 Aug 2022
    CVE-2022-35801
    No fix available
    Packages

    Summary

    Published
    9 Aug 2022
    CVE-2022-35800
    No fix available
    Packages

    Summary

    Published
    9 Aug 2022
    CVE-2022-35799
    No fix available
    Packages

    Summary

    Published
    9 Aug 2022
    CVE-2022-35797
    No fix available
    Packages

    Summary

    Published
    9 Aug 2022
    CVE-2022-35796
    No fix available
    Packages

    Summary

    Published
    9 Aug 2022
    CVE-2022-35795
    No fix available
    Packages

    Summary

    Published
    9 Aug 2022
    CVE-2022-35794
    No fix available
    Packages

    Summary

    Published
    9 Aug 2022
    CVE-2022-35793
    No fix available
    Packages

    Summary

    Published
    9 Aug 2022
    CVE-2022-35792
    No fix available
    Packages

    Summary

    Published
    9 Aug 2022