Open Source Vulnerabilities

redis

Security update for redis

bootstrap-select, bootstrap-select

Cross-site scripting in bootstrap-select

ng-packagr

OS Command Injection in ng-packagr

json-bigint

Uncontrolled Resource Consumption in json-bigint

typeorm

TypeORM vulnerable to MAID and Prototype Pollution

ckeditor4

CKEditor 4.0 vulnerability in the HTML Data Processor

vega-util

Improperly Controlled Modification of Dynamically-Determined Object Attributes in vega-util

joplin

Cross-site Scripting in Joplin

utilitify

Improperly Controlled Modification of Dynamically-Determined Object Attributes in utilitify

pulverizr

OS Command Injection in pulverizr

ua-parser-js

Regular Expression Denial of Service in ua-parser-js

querymen

Improperly Controlled Modification of Dynamically-Determined Object Attributes in querymen

primefaces, org.primefaces:primefaces

Cross-site Scripting in PrimeFaces

node-prompt-here

OS Command Injection in node-prompt-here

closure-compiler-stream

OS Command Injection in closure-compiler-stream

gulp-scss-lint

OS Command Injection in gulp-scss-lint

nim, nim

nim, nim, nim

gulp-tape

OS Command Injection in gulp-tape

gulp-styledocco

OS Command Injection in gulkp-styledocco

docker-compose-remote-api

OS Command Injection in docker-compose-remote-api

marked-tree

Path Traversal in marked-tree

google-closure-library

Improper Input Validation in Google Closure Library

ps-visitor

Command Injection in ps-visitor

onion-oled-js

Command Injection in onion-oled-js

picotts

Command Injection in picotts

marscode

Path Traversal in marscode

canvas

Buffer overflow in canvas

bson

Deserialization of Untrusted Data in bson

servey

Path traversal in servey

com.liferay.portal:release.portal.bom

Open Redirect in Liferay Portal

org.apache.cassandra:cassandra-all, org.apache.cassandra:cassandra-all, org.apache.cassandra:cassandra-all, org.apache.cassandra:cassandra-all, org.apache.cassandra:cassandra-all

Man-in-the-middle attack in Apache Cassandra

net.sf.mpxj:mpxj

Improper Restriction of XML External Entity Reference in MPXJ

com.netflix.spinnaker.orca:orca-core

Server-Side Request Forgery in Spinnaker Orca

org.apache.shiro:shiro-core

Authentication bypass in Apache Shiro

org.apache.wicket:wicket-core, org.apache.wicket:wicket-core, org.apache.wicket:wicket-core, org.apache.wicket:wicket-core, org.apache.wicket:wicket-core, org.apache.wicket:wicket-core, org.apache.wicket:wicket-core

Exposure of Sensitive Information to an Unauthorized Actor in Apache Wicket

org.apache.tika:tika

Infinite Loop in Apache Tika

org.apache.tika:tika

Uncontrolled Resource Consumption in Apache Tika

org.apache.tika:tika

Missing Release of Memory after Effective Lifetime in Apache Tika

org.apache.skywalking:oap-server

SQL Injection in Apache SkyWalking

org.apache.shiro:shiro-core

Improper Authentication in Apache Shiro

org.apache.shiro:shiro-core

Improper Authentication in Apache Shiro

org.odata4j:odata4j-core, org.odata4j:odata4j-dist, org.odata4j:odata4j-parent

SQL Injection in odata4j

org.odata4j:odata4j-core, org.odata4j:odata4j-dist, org.odata4j:odata4j-parent

SQL Injection in odata4j