Open Source Vulnerabilities

WooCommerce < 6.6.0 - Admin+ Stored HTML Injection

org.apache.hive:hive

Apache Hive before 3.1.3 `CREATE` and `DROP` function operations do not check for necessary authorization.

octobot

Octobot mishandles Tentacles upload

,

java-1.8.0-openjdk, java-11-openjdk, timezone

Updated java packages fix security vulnerability

golang

Updated golang packages fix security vulnerability

octobot

gollum

Gollum Cross-site Scripting vulnerability via filename parameter to New Page dialog

angular

Angular (deprecated package) Cross-site Scripting

github.com/containrrr/shoutrrr

Shoutrrr util package DoS via sending 2000, 4000, or 6000 character messages

terser, terser

Terser insecure use of regular expressions leads to ReDoS

github.com/quay/claircore

Path traversal in github.com/quay/claircore

github.com/containers/buildah

Environment variable leakage in github.com/containers/buildah

stdlib, golang.org/x/sys

Incorrect privilege reporting in syscall and golang.org/x/sys/unix

github.com/argoproj/argo-events

Path traversal in github.com/argoproj/argo-events