Open Source Vulnerabilities

remdex/livehelperchat

Cross-site Scripting in LiveHelperChat

github.com/apache/trafficcontrol, github.com/apache/trafficcontrol

Server-Side Request Forgery in Apache Traffic Control

open62541

Heap-use-after-free in UA_ServerConfig_clean

md4c

Heap-buffer-overflow in md_analyze_inlines

chromium

chromium - security update

Cookie and header exposure in twisted

xterm

xterm - security update

zabbix

zabbix - security update

ruby, ruby, ruby, ruby, ruby, ruby, ruby, ruby, ruby, ruby, ruby, ruby, ruby

ruby2.7

Server-Side Request Forgery in Traffic Ops endpoint POST /user/login/oauth

Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat

grpc-swift

Invalid-free in NIOHTTP2.NIOHTTP2Handler.

jsdecena/laracom

Unrestricted Upload of File with Dangerous Type in jsdecena/laracom

org.apache.gobblin:gobblin-core

Hadoop token in temp file visible to all users in Apache Gobblin

org.apache.gobblin:gobblin-core

Apache Gobblin trusts all certificates used for LDAP connections in Gobblin-as-a-Service

silverstripe/framework

Business Logic Errors in SilverStripe Framework

org.apache.activemq:artemis-core-client

Apache ActiveMQ Artemis Uncontrolled Resource Consumption (DoS)

karma

Cross-site Scripting in karma

ptrofimov/beanstalk_console

Cross-site Scripting in Beanstalk console

libphp-adodb

libphp-adodb - security update

xterm

Updated xterm packages fix security vulnerability

qtwebengine5

Updated qtwebengine5 packages fix security vulnerability

lrzsz

Updated lrzsz packages fix security vulnerability

perm, perm, perm, perm, perm, perm, perm, perm

Cross-site Scripting (XSS) - Reflected in ptrofimov/beanstalk_console

crossbeam-utils

Unsoundness of AtomicCell<*64> arithmetics on 32-bit targets that support Atomic*64

Cross-site Scripting (XSS) - DOM in karma-runner/karma

ghostscript

Heap-buffer-overflow in s_hex_process

ndpi

Heap-buffer-overflow in ndpi_strncasestr

object-path-set

Prototype Pollution in object-path-set

@openzeppelin/contracts

Improper Initialization in OpenZeppelin

putil-merge

Prototype Pollution in putil-merge

github.com/filebrowser/filebrowser/v2

Cross-Site Request Forgery in Filebrowser

github.com/filebrowser/filebrowser/v2

Cross-site request forgery in github.com/filebrowser/filebrowser/v2

@strikeentco/set

Prototype Pollution in @strikeentco/set

kicad, kicad, kicad