Open Source Vulnerabilities

golang, golang, golang

golang security update

nodejs-fstream, nodejs-fstream, nodejs-fstream

nodejs-fstream security update

OpenEXR, OpenEXR, OpenEXR

OpenEXR security update

libxml2, libxml2, libxml2

libxml2 security update

php, php

php security update

vim, vim, vim

vim security update

ImageMagick, ImageMagick, ImageMagick

ImageMagick security update

haproxy, haproxy, haproxy

haproxy security update

obs-server, obs-server, obs-server

obs-server security update

swtpm, swtpm, swtpm

swtpm security update

Insufficient Session Expiration in admidio/admidio

fluent-bit

Segv on unknown address in flb_ra_create

fluent-bit

Heap-double-free in read_config

fluent-bit

Heap-double-free in read_config

paramiko, paramiko

Race Condition in Paramiko

golang.org/x/crypto

golang.org/x/crypto/ssh Denial of service via crafted Signer

open-web-analytics/open-web-analytics

Improper Privilege Management in Open Web Analytics

openexr

Heap-double-free in Imf_3_1::RgbaInputFile::~RgbaInputFile

fluent-bit

Segv on unknown address in flb_config_map_properties_check

fluent-bit

Heap-double-free in flb_pack_state_reset

fluent-bit

Heap-use-after-free in jsmn_parse

bind9

bind9 - regression update

io.jenkins.plugins:folder-auth

Stored Cross-site Scripting in folder-auth plugin

nvflare

Allocation of Resources Without Limits or Throttling in nvflare

barryvdh/laravel-translation-manager

Possibility for Denial of Service by overwriting PHP files with language exports

gradio

Improper Neutralization of Formula Elements in a CSV File in Gradio Flagging

node-forge

Improper Verification of Cryptographic Signature in `node-forge`

node-forge

Improper Verification of Cryptographic Signature in node-forge

node-forge

Improper Verification of Cryptographic Signature in node-forge

pocketmine/pocketmine-mp

Improperly checked metadata on tools/armour itemstacks received from the client