Open Source Vulnerabilities

linux, linux, linux

@absolunet/kafe

Regular expression denial of service in @absolunet/kafe

npm-user-validate

Regular expression denial of service in npm-user-validate

@tsed/core

Prototype pollution in @tsed/core

chart.js

Prototype pollution in chart.js

joplin

Cross-site scripting in Joplin

droppy

Path Traversal in droppy

reveal.js

Cross-site Scripting in reveal.js

pdf-image

Improper Input Validation and Code Injection in pdf-image

browserless-chrome

Path Traversal in browserless-chrome

codemirror

Regular expression denial of service in codemirror

dat.gui

Regular Expression Denial of Service in dat.gui

trim

Regular Expression Denial of Service in trim

strapi

Authorization bypass in Strapi

osm-static-maps

Injection and Cross-site Scripting in osm-static-maps

perl-Image-ExifTool, perl-Image-ExifTool, perl-Image-ExifTool

Security update for perl-Image-ExifTool

monitoring-plugins-smart, monitoring-plugins-smart, monitoring-plugins-smart

Security update for monitoring-plugins-smart

lightning-server

Cross-site Scripting in lightning-server

mathjs

Prototype Pollution in mathjs

simpl-schema

Prototype Pollution in simpl-schema

node-pdf-generator

Server-Side Request Forgery in node-pdf-generator

phantomjs-seo

Server-Side Request Forgery in phantomjs-seo

socket.io-file

Duplicate Advisory: "Arbitrary code execution in socket.io-file"

json-pointer, org.webjars.npm:json-pointer

Prototype pollution in json-pointer

shiba

Arbitrary Code Execution in shiba

bmoor

Prototype Pollution in bmoor

pomelo-monitor

OS Command Injection in pomelo-monitor

exiv2, exiv2, exiv2

exiv2 vulnerabilities

,

systemd, systemd, systemd

systemd, systemd, systemd, systemd

geojson2kml

Command Injection in geojson2kml

tiny-conf

Prototype Pollution in tiny-conf

get-git-data

Command injection in get-git-data

quill

Cross-site Scripting in quill

@theia/messages

Command Injection in @theia/messages

swiper

Prototype Pollution in swiper