Open Source Vulnerabilities

url-parse

url-parse Incorrectly parses URLs that include an '@'

plist

Prototype pollution in Plist before 3.0.5 can cause denial of service

fmt

Stack-buffer-overflow in fmt::v8::basic_memory_buffer<unsigned int, 32ul, std::__1::allocator<unsigned in

php7.4

php7.4 - security update

redis, redis

redis - security update

snapd, snapd

snapd - security update

,

zsh

zsh - security update

thunderbird, thunderbird, thunderbird

snapd, snapd, snapd

snapd, snapd, snapd

snapd, snapd, snapd

snapd, snapd, snapd

Improper CSP in Image Optimization API for Next.js

libsndfile

Security update for libsndfile

aide

Security update for aide

net/http/cgi, net/http/fcgi

node-url-parse, node-url-parse, node-url-parse

node-url-parse, node-url-parse, node-url-parse

stdlib

Certificate verification error on Windows in crypto/x509

stdlib

Data race and crash in net/http

golang.org/x/crypto

Panic on crafted authentication request message in golang.org/x/crypto/ssh

stdlib

Infinite loop when decoding inputs in encoding/xml

stdlib

Incorrect operations on the P-224 curve in crypto/elliptic

golang.org/x/net

Infinite loop when parsing inputs in golang.org/x/net/html

stdlib

Improper sanitization when resolving values from DNS in net

stdlib

Panic when reading certain archives in archive/zip

stdlib

Attacker can drop certain headers in net/http/httputil

stdlib

Panic on inputs with large exponents in math/big

stdlib

Panic on certain certificates in crypto/tls

stdlib

Panic in ReverseProxy in net/http/httputil

snapd, snapd

snapd vulnerabilities

next

Improper CSP in Image Optimization API for Next.js versions between 10.0.0 and 12.1.0