Open Source Vulnerabilities

com.fasterxml.jackson.core:jackson-databind, com.fasterxml.jackson.core:jackson-databind, com.fasterxml.jackson.core:jackson-databind

Deserialization of Untrusted Data in jackson-databind due to polymorphic deserialization

com.fasterxml.jackson.core:jackson-databind, com.fasterxml.jackson.core:jackson-databind, com.fasterxml.jackson.core:jackson-databind, com.fasterxml.jackson.core:jackson-databind

Arbitrary Code Execution in jackson-databind

react-dom, react-dom, react-dom, react-dom, react-dom

Cross-Site Scripting in react-dom

binutils, binutils, binutils

crash

CVE-2018-20673 affecting package crash for versions less than 9.0.0-1

binutils, binutils, binutils

django, django

Django vulnerable to XSS on 500 pages

django, django, django

Django open redirect and possible XSS attack via user-supplied numeric redirect URLs

django, django, django

Django open redirect

django, django, django

Django denial-of-service possibility in urlize and urlizetrunc template filters

django, django, django

Django Denial-of-service possibility in truncatechars_html and truncatewords_html template filters

recurly, recurly, recurly, recurly, recurly, recurly, recurly

Recurly vulnerable to SSRF

mistune

mistune Cross-site scripting (XSS) vulnerability

plone, plone

Plone Open Redirect

bleach

Bleach URI Scheme Restriction Bypass

moin

Moderate severity vulnerability that affects moin

pyyaml

PyYAML insecurely deserializes YAML strings leading to arbitrary code execution

sqla-yaml-fixtures

sqla-yaml-fixtures is vulnerable to Code Injection

com.hubspot.jinjava:jinjava

Jinjava calls getClass

org.hswebframework.web:hsweb-commons

Moderate severity vulnerability that affects org.hswebframework.web:hsweb-commons

org.hswebframework.web:hsweb-commons

Cross-Site Request Forgery (CSRF) in hswebframework.web:hsweb-commons

rendertron

rendertron LFI vulnerability

rendertron

rendertron can remotely shut down Chrome instance

react-dev-utils, react-dev-utils, react-dev-utils, react-dev-utils, react-dev-utils

react-dev-utils on Windows vulnerable to Remote Code Execution

webpack-dev-server

Missing Origin Validation in webpack-dev-server

binutils, binutils, binutils

CVE-2018-20671 does not affect BellSoft software

binutils, binutils, binutils

xen, xen, xen, xen, xen

Security update for xen

polkit, polkit, polkit, polkit, polkit, polkit, polkit, polkit, polkit, polkit, polkit, polkit, polkit, polkit, polkit, polkit, polkit

Security update for polkit

mailman, mailman, mailman, mailman, mailman

Security update for mailman