Open Source Vulnerabilities
undici
TuxCare security update for undici (1 CVE)
org.springframework:spring-expression
TuxCare security update for org.springframework:spring-expression (1 CVE)
org.springframework:spring-expression
TuxCare security update for org.springframework:spring-expression (1 CVE)
AndyFactory newspaper4k Image Extractor image_extractor.py Article.parse server-side request forgery
AndyFactory newspaper4k Image Extractor image_extractor.py Article.parse server-side request forgery
@bytebase/dbhub
DBHub: MySQL and MariaDB comment interpretation bypasses read-only SQL validation
@bytebase/dbhub
DBHub: MySQL and MariaDB comment interpretation bypasses read-only SQL validation
org.springframework:spring-context, org.springframework:spring-expression, org.springframework:spring-web, org.springframework:spring-webflux
TuxCare security update for org.springframework (3 CVEs)
org.springframework:spring-context/ org.springframework:spring-expression/ org.springframework:spring-web/ org.springframework:spring-webflux
TuxCare security update for org.springframework (3 CVEs)
@sd-jwt/decode, @sd-jwt/core
SD JWT JS: Tampered disclosures silently dropped instead of rejected
@sd-jwt/decode/ @sd-jwt/core
SD JWT JS: Tampered disclosures silently dropped instead of rejected
FOSSBilling: Low-privileged staff can run JavaScript in administrators' browsers via stored XSS in support ticket notes
FOSSBilling: Low-privileged staff can run JavaScript in administrators' browsers via stored XSS in support ticket notes
org.springframework:spring-expression, org.springframework:spring-webflux, org.springframework:spring-webmvc
TuxCare security update for org.springframework (3 CVEs)
org.springframework:spring-expression/ org.springframework:spring-webflux/ org.springframework:spring-webmvc
TuxCare security update for org.springframework (3 CVEs)
