Open Source Vulnerabilities

@cubejs-backend/api-gateway

Default Express middleware security check is ignored in production

org.apache.cxf:cxf, org.apache.cxf:cxf, org.apache.cxf:apache-cxf, org.apache.cxf:apache-cxf

Potential DOS attack due to unrestricted attachment count in messages

org.apache.cxf:cxf, org.apache.cxf:cxf

Potential session hijack in Apache CXF

notebook

Cross-site scripting in Jupyter Notebook

sequelize

SQL Injection in sequelize

libapache2-mod-ruid2

bolt/bolt

Cross-site Scripting in Bolt

mistral, mistral, mistral, python-mistral-lib, python-mistral-lib, python-mistral-lib, python-oslo.utils, python-oslo.utils, python-oslo.utils

389-ds-base, 389-ds-base

ceph, ceph, ceph

libhibernate-validator-java, libhibernate-validator-java, libhibernate-validator-java

, , ,

python-mistral-lib

389-ds-base, 389-ds-base, 389-ds-base

libhibernate-validator-java, libhibernate-validator-java, libhibernate-validator-java, libhibernate-validator-java, libhibernate-validator-java, libhibernate-validator-java, libhibernate-validator-java

rsyslog, rsyslog, rsyslog, rsyslog

Security update for rsyslog

libssh2_org, libssh2_org, libssh2_org, libssh2_org, libssh2_org, libssh2_org, libssh2_org, libssh2_org, libssh2_org, libssh2_org, libssh2_org, libssh2_org, libssh2_org, libssh2_org, libssh2_org, libssh2_org, libssh2_org, libssh2_org, libssh2_org, libssh2_org

Security update for libssh2_org

apache2-mod_auth_openidc, apache2-mod_auth_openidc

Security update for apache2-mod_auth_openidc

apache2-mod_auth_openidc

Security update for apache2-mod_auth_openidc

rubygem-haml, rubygem-haml, rubygem-haml

Security update for rubygem-haml

matrix-synapse

gri, gri, gri

matrix-synapse

matrix-synapse

fribidi

fribidi - security update

qtwebkit-opensource-src, webkit2gtk, qtwebkit-source, webkitgtk, webkit2gtk, qtwebkit-opensource-src, qtwebkit-source, webkitgtk, qtwebkit-opensource-src, qtwebkit-opensource-src, qtwebkit-opensource-src

djvulibre

djvulibre - security update

qtwebkit-opensource-src, webkit2gtk, qtwebkit-source, webkitgtk, webkit2gtk, qtwebkit-opensource-src, qtwebkit-source, webkitgtk, qtwebkit-opensource-src, qtwebkit-opensource-src, qtwebkit-opensource-src

linux-hwe-edge, linux-aws-5.0, linux-azure, linux-azure-5.3, linux-gcp, linux-gcp-5.3, linux-gke-5.0, linux-hwe, linux-oem-osp1, linux-oracle-5.0, linux-azure-edge, linux-gcp-edge, linux-hwe-edge, linux-aws-5.15, linux-azure-5.15, linux-azure-fde, linux-azure-fde-5.15, linux-gcp-5.15, linux-gke, linux-gkeop, linux-gkeop-5.15, linux-hwe-5.15, linux-ibm-5.15, linux-intel-iotg-5.15, linux-lowlatency-hwe-5.15, linux-nvidia-tegra-5.15, linux-oracle-5.15, linux-raspi2, linux-riscv, linux-riscv-5.15, linux, linux-aws, linux-aws-6.8, linux-azure, linux-azure-6.8, linux-azure-fde, linux-azure-fde-6.8, linux-gcp, linux-gcp-6.8, linux-gke, linux-gkeop, linux-hwe-6.8, linux-ibm, linux-ibm-6.8, linux-intel-iot-realtime, linux-intel-iotg, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-6.8, linux-nvidia, linux-nvidia-6.8, linux-nvidia-tegra, linux-nvidia-tegra-igx, linux-oracle, linux-oracle-6.8, linux-raspi, linux-realtime, linux-riscv, linux-riscv-6.8, linux-xilinx-zynqmp, linux-bluefield, linux-intel-iot-realtime, linux-realtime, linux-realtime-6.8, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux, linux-aws, linux-aws-6.14, linux-aws-6.17, linux-aws-7.0, linux-azure, linux-azure-6.11, linux-azure-6.14, linux-azure-6.17, linux-azure-7.0, linux-azure-fde, linux-azure-fde-6.14, linux-azure-fde-6.17, linux-azure-fde-7.0, linux-azure-nvidia, linux-azure-nvidia-6.14, linux-gcp, linux-gcp-6.11, linux-gcp-6.14, linux-gcp-6.17, linux-gcp-7.0, linux-gke, linux-gkeop, linux-hwe-6.11, linux-hwe-6.14, linux-hwe-6.17, linux-hwe-7.0, linux-ibm, linux-intel, linux-lowlatency, linux-lowlatency-hwe-6.11, linux-nvidia, linux-nvidia-6.11, linux-nvidia-6.17, linux-nvidia-7.0, linux-nvidia-lowlatency, linux-nvidia-tegra, linux-oem-6.11, linux-oem-6.14, linux-oem-6.17, linux-oem-6.8, linux-oracle, linux-oracle-6.14, linux-oracle-6.17, linux-oracle-7.0, linux-raspi, linux-raspi-realtime, linux-realtime, linux-riscv, linux-riscv-6.14, linux-riscv-6.17, linux-riscv-7.0, linux-vmware, linux-xilinx, linux-bluefield, linux-raspi-realtime, linux-realtime, linux-realtime-6.14, linux-realtime-6.17, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux, linux-aws, linux-azure, linux-azure-fde, linux-gcp, linux-oracle, linux-raspi, linux-realtime, linux-riscv, linux, linux-aws, linux-azure, linux-azure-fde, linux-gcp, linux-gke, linux-ibm, linux-nvidia, linux-nvidia-bos, linux-oem-7.0, linux-oracle, linux-raspi, linux-realtime, linux-riscv

expat

Updated expat packages fix security vulnerability

chromium-browser-stable

Updated chromium-browser-stable packages fix security vulnerabilities

freetds

Updated freetds packages fix security vulnerability

python, python3

Updated python packages fix security vulnerabilities

unbound

Updated unbound packages fix security vulnerability

thunderbird, thunderbird-l10n

Updated thunderbird packages fix security vulnerabilities

firefox, firefox-l10n, nspr, nss, rootcerts

Updated firefox packages fix security vulnerabilities

proftpd

Updated proftpd packages fix security vulnerabilities

gambas3, gambas3, gambas3

clamav, clamav, clamav