Open Source Vulnerabilities

twig/twig, twig/twig

Twig Sandbox Information Disclosure

symfony/http-kernel, symfony/http-kernel, symfony/http-kernel, symfony/http-kernel, symfony/symfony, symfony/symfony, symfony/symfony, symfony/symfony

Symfony Http-Kernel has non-constant time comparison in UriSigner

phpunit/phpunit, phpunit/phpunit

Code Injection in PHPUnit

sabberworm/php-css-parser, sabberworm/php-css-parser, sabberworm/php-css-parser, sabberworm/php-css-parser, sabberworm/php-css-parser, sabberworm/php-css-parser, sabberworm/php-css-parser, sabberworm/php-css-parser, sabberworm/php-css-parser, sabberworm/php-css-parser, sabberworm/php-css-parser, sabberworm/php-css-parser, sabberworm/php-css-parser

Sabberworm PHP CSS Parser Code injection vulnerability in allSelectors()

silverstripe/framework

FormField with square brackets in field name skips validation

erusev/parsedown

Parsedown Class-Name Injection

squizlabs/php_codesniffer

Arbitrary shell execution

squizlabs/php_codesniffer

Arbitrary shell execution

opensc

Heap-buffer-overflow in epassNUMBER_hook_path

opensc

Heap-buffer-overflow in cosm_new_file

fluent-bit

Heap-use-after-free in jsmn_parse

exiv2

Heap-buffer-overflow in Exiv2::getULong

anchorcms/anchor-cms

Cross-Site Request Forgery in Anchor CMS

nokogiri

Nokogiri affected by zlib's Out-of-bounds Write vulnerability

com.predic8:soa-model-parent, com.predic8:soa-model-core

Improper Restriction of XML External Entity Reference in soa-model

forkcms/forkcms

SQL Injection in Fork CMS

yeswiki/yeswiki

SQL Injection in Yeswiki

org.keycloak:keycloak-core

Cross-site Scripting in Keycloak

kubeclient

Improper Certificate Validation in kubeclient

moodle/moodle, moodle/moodle, moodle/moodle

SQL Injection in Moodle

fluent-bit

Heap-double-free in flb_pack_state_reset

ghostscript

UNKNOWN READ in s_RLE_process

netatalk, netatalk

netatalk, netatalk

check-mk

check-mk, check-mk

Discoverability of user password hash in Statamic CMS

Sandbox bypass leading to arbitrary code execution in Deno

libkiwix, libkiwix, libkiwix

libkiwix, libkiwix, libkiwix, libkiwix, libkiwix, libkiwix, libkiwix

flask-appbuilder

Open Redirect in Flask-AppBuilder