Open Source Vulnerabilities

runc, runc

runc vulnerability

runc, runc, runc

redis

Important: redis:6 security update

linux-raspi-5.4, linux-raspi

linux-raspi, linux-raspi-5.4 vulnerabilities

assimp

Heap-buffer-overflow in _m3d_safestr

github.com/docker/docker

Path Traversal in Docker

github.com/miekg/dns

miekg/dns insecurely generates random numbers

github.com/kiali/kiali

Insufficient Session Expiration in Kiali

gopkg.in/macaron.v1

gopkg.in/macaron.v1 Open Redirect vulnerability

github.com/u-root/u-root

Path traversal in u-root

github.com/dgrijalva/jwt-go, github.com/dgrijalva/jwt-go/v4

Authorization bypass in github.com/dgrijalva/jwt-go

github.com/gorilla/websocket

Integer overflow in github.com/gorilla/websocket

github.com/tidwall/gjson

github.com/tidwall/gjson is vulnerable to Denial of service

github.com/containers/podman/v3

Podman Origin Validation Error

github.com/pires/go-proxyproto

github.com/pires/go-proxyproto denial of service vulnerability

github.com/microcosm-cc/bluemonday

Cross-site scripting in bluemonday

github.com/microcosm-cc/bluemonday

Cross-site scripting due to incorrect sanitization in github.com/microcosm-cc/bluemonday

gogs.io/gogs

Insecure Permissions in Gogs

github.com/unknwon/cae

github.com/unknwon/cae Path Traversal vulnerability

github.com/unknwon/cae

Path Traversal in github.com/unknwon/cae/zip

rlottie, rlottie, rlottie

rlottie, rlottie, rlottie

rlottie, rlottie, rlottie, rlottie

rlottie

rlottie, rlottie

rlottie

rlottie

rlottie

rlottie

rlottie, rlottie

gopkg.in/square/go-jose.v1

Go JOSE Signature Validation Bypass

github.com/ethereum/go-ethereum

Go Ethereum Improper Input Validation