Open Source Vulnerabilities

MozillaThunderbird

Security update for MozillaThunderbird

Cross-site Scripting (XSS) - Stored in orchardcms/orchardcore

c-blosc2

Heap-buffer-overflow in LZ4_decompress_safe

c-blosc2

Heap-buffer-overflow in ndlz8_decompress

Missing Authorization in snipe/snipe-it

lxml, lxml

lxml - security update

epiphany-browser

epiphany-browser - security update

roundcube

roundcube - security update

gdal

gdal - security update

firefox, firefox-l10n, nspr, nss, rootcerts

Updated nss and firefox packages fix security vulnerabilities

Cross-site Scripting (XSS) - Reflected in keystonejs/keystone

linux, linux, linux

linux-hwe-edge, linux-aws-5.0, linux-aws-5.3, linux-azure, linux-azure-5.3, linux-azure-edge, linux-gcp, linux-gcp-5.3, linux-gke-4.15, linux-hwe, linux-hwe-edge, linux-oem, linux-oracle-5.0, linux-oracle-5.3, linux-aws-5.11, linux-azure-5.11, linux-gcp-5.11, linux-oem-5.10, linux-oracle-5.11, linux-riscv-5.11, linux-aws-5.8, linux-azure-5.8, linux-gcp-5.8, linux-hwe-5.11, linux-hwe-5.8, linux-intel-5.13, linux-oem-5.6, linux-oracle-5.8, linux-raspi2, linux-riscv, linux-riscv-5.8

guacamole-server, guacamole-server, guacamole-server, guacamole-server

guacamole-server, guacamole-server, guacamole-server, guacamole-server

Lookup operations do not take into account wildcards in SpiceDB