Open Source Vulnerabilities

postcss, postcss

Regular Expression Denial of Service in postcss

org.apache.tika:tika

Infinite loop in Apache Tika

org.springframework.security:spring-security-bom, org.springframework.security:spring-security-bom, org.springframework.security:spring-security-bom, org.springframework.security:spring-security-web, org.springframework.security:spring-security-web, org.springframework.security:spring-security-web

Privilege escalation in spring security

com.atlassian.connect:atlassian-connect-spring-boot-starter

Broken Authentication in Atlassian Connect Spring Boot

org.springframework.cloud:spring-cloud-netflix-zuul

Incorrect Authorization in Spring Cloud Netflix Zuul

org.apache.solr:solr-core

Improper permission handling in Apache Solr

org.apache.solr:solr-parent

Server-Side Request Forgery in Apache Solr

org.apache.solr:solr-parent

Incorrect Authorization in Apache Solr

com.typesafe.akka:akka-http-core, com.typesafe.akka:akka-http-core

HTTP Request Smuggling in akka-http-core

bundler

Insecure path handling in Bundler

pyyaml

pyyaml vulnerability

cyrus-imapd, cyrus-imapd, cyrus-imapd

cyrus-imapd, cyrus-imapd

webkit2gtk, webkit2gtk

webkit2gtk vulnerabilities

hivex

hivex - security update

libxml2

libxml2 - security update

pillow, pillow, pillow-python2

pillow, pillow, pillow, pillow-python2

pillow, pillow, pillow, pillow-python2

pillow, pillow, pillow, pillow, pillow-python2

pillow, pillow, pillow, pillow, pillow-python2

pillow, pillow, pillow, pillow, pillow-python2

alpine

Security update for alpine

avahi, avahi-glib2, avahi-mono, avahi-qt4

Security update for avahi