Open Source Vulnerabilities

github.com/bitly/oauth2_proxy

Open Redirect in oauth2_proxy

github.com/oauth2-proxy/oauth2-proxy

The pattern '/\domain.com' is not disallowed when redirecting, allowing for open redirect

github.com/oauth2-proxy/oauth2-proxy

Open Redirect in OAuth2 Proxy

github.com/oauth2-proxy/oauth2-proxy

Open Redirect in OAuth2 Proxy

github.com/concourse/concourse, github.com/concourse/concourse, github.com/concourse/dex, github.com/concourse/dex, github.com/concourse/dex, github.com/concourse/concourse, github.com/concourse/concourse

GitLab auth uses full name instead of username as user ID, allowing impersonation

github.com/dexidp/dex, github.com/russellhaering/goxmldsig

Critical security issues in XML encoding in github.com/dexidp/dex

github.com/dexidp/dex

Authentication Bypass in dex

netdata, netdata

Security update for netdata

npm-groovy-lint

Remote Code Execution in npm-groovy-lint

github.com/openshift/origin

Denial of Service in OpenShift Origin

github.com/openshift/origin

Authorization bypass in Openshift

github.com/authelia/authelia/v4

Authelia vulnerable to an authentication bypassed with malformed request URI on nginx

gopkg.in/yaml.v2, github.com/go-yaml/yaml

Excessive Platform Resource Consumption within a Loop in Kubernetes

samba, samba, samba, samba, samba

Recommended update for samba

samba, samba, samba, samba, samba, samba, samba, samba, samba, samba, samba, samba

Recommended update for samba

apache2, apache2, apache2

apache2, apache2, apache2, apache2, apache2, apache2, apache2, apache2, apache2, apache2, apache2, apache2, apache2

apache2, apache2, apache2

apache2, apache2, apache2, apache2, apache2, apache2, apache2, apache2, apache2, apache2, apache2, apache2, apache2

httpd

CVE-2021-44224 affecting package httpd for versions less than 2.4.52-1

httpd

CVE-2021-44790 affecting package httpd for versions less than 2.4.52-1

apache2, apache2, apache2, apache2, apache2

apache2, apache2, apache2, apache2, apache2

nss, nss-devel, nss-pkcs11-devel, nss-sysinit, nss-tools

Fix of CVE: CVE-2021-43527

brotli-sys

Integer overflow in the bundled Brotli C library

compu-brotli-sys

Integer overflow in the bundled Brotli C library

xorg-x11-server, xorg-x11-server, xorg-x11-server, xorg-x11-server, xorg-x11-server, xorg-x11-server, xorg-x11-server

Security update for xorg-x11-server

xorg-x11-server, xorg-x11-server

Security update for xorg-x11-server

xorg-x11-server, xorg-x11-server, xorg-x11-server, xorg-x11-server, xorg-x11-server, xorg-x11-server

Security update for xorg-x11-server

xorg-x11-server, xorg-x11-server, xorg-x11-server, xorg-x11-server

Security update for xorg-x11-server

xorg-x11-server, xorg-x11-server, xorg-x11-server, xorg-x11-server

Security update for xorg-x11-server

xorg-x11-server, xorg-x11-server, xorg-x11-server

Security update for xorg-x11-server

log4j

Security update for log4j

nextcloud, nextcloud, nextcloud, nextcloud, nextcloud, nextcloud

Security update for nextcloud

disruptor, jakarta-servlet, log4j

Security update for log4j

chromium, chromium

Security update for chromium

mediawiki, mediawiki, mediawiki

mediawiki, mediawiki

,