Open Source Vulnerabilities

ghostscript

Memcpy-param-overlap in FT_Stream_TryRead

com.alibaba.nacos:nacos-client

Use of Hard-coded Credentials in Nacos

lxml

lxml NULL Pointer Dereference allows attackers to cause a denial of service

github.com/heroiclabs/nakama

Insufficient Session Expiration in Nakama

github.com/beego/beego, github.com/beego/beego/v2

Path Traversal in Beego

github.com/heroiclabs/nakama/v3

Improper Restriction of Excessive Authentication Attempts

ghostscript

Segv on unknown address in gs_heap_free_object

file

Heap-buffer-overflow in json_parse

Authentication Bypass in Roxy-wi

Apache Commons Configuration insecure interpolation defaults

intel-microcode, intel-microcode

intel-microcode - security update

Inefficient Regular Expression Complexity in moment

jquery-validation

jquery-validation Regular Expression Denial of Service due to arbitrary input to url2 method

pycares

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in pycares

ujson

Incorrect handling of invalid surrogate pair characters

ujson

Potential double free of buffer during string decoding

opensearch-ruby

opensearch-ruby 2.x before 2.0.2 vulnerable to unsafe YAML deserialization

thunderbird, thunderbird-l10n

Updated thunderbird packages fix security vulnerability

ruby-rack

Updated ruby-rack packages fix security vulnerability

firefox, firefox-l10n, rootcerts, nss

Updated firefox packages fix security vulnerability

curl

Updated curl packages fix security vulnerability

squid

Updated squid packages fix security vulnerability

ruby-git

Updated ruby-git packages fix security vulnerability

cyrus-imapd

Updated cyrus-imapd packages fix security vulnerability

mermaid

Possible inject arbitrary `CSS` into the generated graph affecting the container HTML

Improper Restriction of Excessive Authentication Attempts in heroiclabs/nakama

ujson, ujson, ujson

ujson, ujson, ujson

pandas, ujson, collada2gltf, pandas, collada2gltf, pandas, ujson, pandas, collada2gltf, pandas, ujson, pandas, pandas, pandas, pandas

pandas, ujson, collada2gltf, pandas, collada2gltf, pandas, ujson, pandas, collada2gltf, pandas, ujson, pandas, pandas, pandas, pandas

Incorrect handling of invalid surrogate pair characters in ujson

Double free of buffer during string decoding in ujson

SMTP Command Injection in iCalendar Attachments to emails via newlines in Nextcloud Server

firefox, firefox

firefox vulnerabilities

kernel-livepatch-SLE15-SP1_Update_27

Security update for the Linux Kernel (Live Patch 27 for SLE 15 SP1)

php7, php7, php7, php7, php7, php7, php7, php7, php7, php7, php7

Security update for php7

dpdk, dpdk, dpdk, dpdk, dpdk, dpdk-thunderx, dpdk

Security update for dpdk