Open Source Vulnerabilities

nfpm

denial of service (DoS) vulnerability was discovered in go-git versions prior to v5

qpdf

stack-consumption vulnerability was found in libqpdf in QPDF 6

qpdf

libqpdf

qpdf

libqpdf

qpdf

libqpdf

kubo, kubo, kubo, kubo, kubo

go-ipfs is an open-source golang implementation of IPFS which is a global, versioned, peer-to-peer filesystem

qpdf

Heap Buffer Overflow vulnerability in qpdf 11

kubo, kubo, kubo, kubo, kubo

go-ipfs is an open-source golang implementation of IPFS which is a global, versioned, peer-to-peer filesystem

kubo, kubo, kubo, kubo, kubo

quic-go is an implementation of the QUIC protocol in Go

navidrome

model/criteria/criteria

wazuh-dashboard-dashboards-notifications-fips

wazuh-dashboard-dashboards-notifications-fips

lxc

lxc-user-nic when asked to delete a network interface will unconditionally open a user provided path

lxc

runc through 1

lxc

lxc-user-nic in lxc through 5

superset-6.1, superset-6.1

superset-6.1, superset-6.1

superset-6.1, superset-6.1

superset-6.1, superset-6.1

aom

aom_dsp/noise_model

virt-manager

Virt-install(1) utility used to provision new virtual machines has introduced an option '--unattended' to create VMs without user interaction

aom

aom_dsp/grain_table

aom

aom_image

asterisk

Buffer overflow in DNS SRV and NAPTR lookups in Digium Asterisk 15

aom

Integer overflow in libaom internal function img_alloc_helper can lead to heap buffer overflow

asterisk

Integer Signedness issue (for a return code) in the res_pjsip_sdp_rtp module in Digium Asterisk versions 15

opensearch-dashboards-3-fips-dashboards-query-workbench

asterisk

Buffer overflow in res_pjsip_messaging in Digium Asterisk versions 13

asterisk

main/translate

asterisk

res_pjsip_t38 in Sangoma Asterisk 15

httpie

All versions of the HTTPie package prior to version 1

asterisk

issue was discovered in channels/chan_sip

httpie

Missing SSL certificate validation in HTTPie v3

asterisk

issue was discovered in manager

asterisk

res_pjsip_session crash was discovered in Asterisk Open Source 13

asterisk

buffer overflow in res_pjsip_diversion

asterisk

issue was discovered in res_pjsip_diversion

zfs

OpenZFS through 2

asterisk

issue was discovered in res_pjsip_session

vaultwarden

issue was discovered in Vaultwarden (formerly Bitwarden_RS) 1

asterisk

issue was discovered in Sangoma Asterisk 16

vaultwarden

issue was discovered in Vaultwarden (formerly Bitwarden_RS) 1

asterisk

stack-based buffer overflow in res_rtp_asterisk

vaultwarden

issue was discovered in Vaultwarden (formerly Bitwarden_RS) 1

asterisk

Incorrect access controls in res_srtp

asterisk

issue was discovered in Sangoma Asterisk 13

pjproject

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE

asterisk

issue was discovered in Asterisk through 19

pjproject

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE

asterisk

SSRF issue was discovered in Asterisk through 19