Open Source Vulnerabilities

Open Redirect in express-openid-connect

express-openid-connect

URL Redirection to Untrusted Site ('Open Redirect') in express-openid-connect

Remote Command Injection in RaspberryMatic

Exposure of Sensitive Information in Pomerium

Insertion of Sensitive Information into Log File affects Jupyter Notebook

linux-azure, linux-aws-hwe, linux-azure, linux-gcp, linux-oracle, linux-gcp-4.15, linux-oracle, linux-raspi2

linux-aws-hwe, linux-azure, linux-gcp, linux-gcp-4.15, linux-oracle, linux-raspi2 vulnerability

golang

Updated golang packages fix security vulnerability

wavpack

Updated wavpack packages fix security vulnerability

zlib

Updated zlib packages fix security vulnerability

dolibarr

tomcat9, tomcat9

tomcat9 vulnerabilities

org.springframework:spring-beans, org.springframework:spring-beans, org.springframework:spring-webmvc, org.springframework:spring-webmvc, org.springframework.boot:spring-boot-starter-web, org.springframework.boot:spring-boot-starter-web, org.springframework:spring-webflux, org.springframework:spring-webflux, org.springframework.boot:spring-boot-starter-webflux, org.springframework.boot:spring-boot-starter-webflux

Remote Code Execution in Spring Framework

dolibarr

Cross-site Scripting (XSS) - Stored in vanessa219/vditor

rsync, rsync

rsync vulnerability

wasmtime

Use after free with `externref`s and epoch interruption in Wasmtime

expat, expat

Security update for expat

Loose comparison causes IDOR on multiple endpoints in livehelperchat/livehelperchat

kernel-firmware, kernel-firmware

Security update for kernel-firmware

kernel-firmware

Security update for kernel-firmware

abcm2ps, abcm2ps

Security update for abcm2ps

nextcloud, nextcloud

Security update for nextcloud

icingaweb2, icingaweb2

Security update for icingaweb2

SSRF on index.php/cobrowse/proxycss/ in livehelperchat/livehelperchat