Open Source Vulnerabilities

spip

spip - security update

openssl, openssl, openssl, openssl, openssl, openssl1.0, edk2, openssl, openssl, openssl, edk2, openssl, openssl, edk2, nodejs, openssl

@openzeppelin/contracts-upgradeable

Inconsistent storage layout for ERC2771ContextUpgradeable

clickhouse

clickhouse

clickhouse

clickhouse

clickhouse

clickhouse

clickhouse

gogs.io/gogs

Gogs vulnerable to improper PAM authorization handling

gogs.io/gogs

SSRF in repository migration

Exposure of Sensitive Information to an Unauthorized Actor in sysend.js

twisted

HTTP/2 DoS Attacks: Ping, Reset, and Settings Floods

sysend

Leaking of user information on Cross-Domain communication in sysend

sylius/sylius, sylius/sylius, sylius/sylius

Improper sanitize of SVG files during content upload ('Cross-site Scripting') in sylius/sylius

sylius/sylius, sylius/sylius

Insufficient Session Expiration in Sylius

sylius/sylius, sylius/sylius, sylius/sylius

Sensitive Information Exposure in Sylius

@plone/volto

Sudden swap of user auth tokens in Volto

Improper Authentication in Volto

sylius/sylius, sylius/sylius, sylius/sylius

Improper Restriction of Rendered UI Layers or Frames in Sylius

Basic Cross-site Scripting and Unrestricted Upload of File with Dangerous Type in Sylius

vim, vim, vim

vim, vim, vim, vim, vim, vim, vim, vim, vim, vim, vim, vim

vim

CVE-2022-0943 affecting package vim for versions less than 8.2.4743-1

vim, vim, vim, vim, vim

Insufficient Session Expiration in Sylius

Exposure of Sensitive Information Due to Incompatible Policies in Sylius

gpac

fish, fish, fish

fish, fish, fish, fish, fish, fish, fish, fish, fish

gpac, gpac, gpac, gpac, gpac

fish, fish

Improper Restriction of Rendered UI Layers or Frames in Sylius

libvcs

zsh, zsh, zsh

zsh vulnerabilities

Command Injection