Open Source Vulnerabilities

wpewebkit

wpewebkit - security update

webkit2gtk, webkit2gtk

webkit2gtk - security update

php8.1

autotrace, autotrace

xen, xen, xen

xen, xen, xen, xen, xen, xen, xen, xen, xen, xen, xen, xen

linux, linux, linux

kernel

CVE-2021-4135 affecting package kernel for versions less than 5.15.67.1-4

toybox, toybox, toybox, toybox, toybox

gradle, gradle, gradle, gradle, gradle, gradle, gradle, gradle

CVE-2022-23825 does not affect BellSoft software

mplayer, mplayer, mplayer, mplayer, mplayer

civicrm, civicrm, civicrm, civicrm

Gradle's dependency verification can ignore checksum verification when signature verification cannot be performed

jquery-validation ReDoS in url2 due to incomplete fix of CVE-2021-43306

Potential Timing Attack Vector in @fastify/bearer-auth

Guest accounts can list all public channels

Malicious imports can lead to Denial of Service

Team members could access sensitive information of other users via an API call