Open Source Vulnerabilities

py3.13-requests, py3.12-requests, py3.11-requests

Requests is a HTTP library

jenkins

In Jenkins 2

ghostscript

use-after-free vulnerability in xps_finish_image_path() in devices/vector/gdevxps

py3.14-yaml, py3-yaml, py3.13-yaml, py3.10-yaml, py3.12-yaml, py3.11-yaml

vulnerability was discovered in the PyYAML library in versions before 5

avahi

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER

py3-babel, py3.14-babel, py3.13-babel, py3.12-babel, py3.11-babel

Babel

ghostscript

buffer overflow vulnerability in jetp3852_print_page() in devices/gdev3852

jenkins

In spring framework versions prior to 5

py3-pygments, py3.14-pygments, py3.13-pygments, py3.10-pygments, py3.12-pygments, py3.11-pygments

infinite loop in SMLLexer in Pygments versions 1

avahi

avahi-daemon in Avahi through 0

ghostscript

buffer overflow vulnerability in okiibm_print_page1() in devices/gdevokii

jenkins

In spring framework versions prior to 5

avahi

flaw was found in avahi in versions 0

ghostscript

buffer overflow vulnerability in tiff12_print_page() in devices/gdevtfnx

jenkins

In Eclipse Jetty HTTP/2 server implementation, when encountering an invalid HTTP/2 request, the error handling has a bug that can wind up not properly cleaning up the active connections and associa...

ghostscript

Division by Zero vulnerability in bj10v_print_page() in contrib/japanese/gdev10v

avahi

flaw was found in avahi 0

request-9047-keycloak-fips-26.7

request-9047-keycloak-fips-26.7

request-9047-keycloak-fips-26.7

ghostscript

buffer overflow vulnerability in mj_color_correct() in contrib/japanese/gdevmjc

request-9047-keycloak-fips-26.7

request-9047-keycloak-fips-26.7

avahi

vulnerability was found in Avahi

ghostscript

buffer overflow vulnerability in FloydSteinbergDitheringC() in contrib/gdevbjca

avahi

vulnerability was found in Avahi

ghostscript

buffer overflow vulnerability in GetNumWrongData() in contrib/lips4/gdevlips

avahi

vulnerability was found in the avahi library

ghostscript

null pointer dereference vulnerability in clj_media_size() in devices/gdevclj

avahi

vulnerability was found in Avahi

ghostscript

buffer overflow vulnerability in epsc_print_page() in devices/gdevepsc

avahi

vulnerability was found in Avahi, where a reachable assertion exists in avahi_dns_packet_append_record

ghostscript

null pointer dereference vulnerability in compose_group_nonknockout_nonblend_isolated_allmask_common() in base/gxblend

avahi

vulnerability was found in Avahi

k3s

kubectl cp command allows copying files between containers and the user machine

uwsgi

uwsgi_expand_path function in core/utils

ghostscript

buffer overflow vulnerability in mj_raster_cmd() in contrib/japanese/gdevmjc

k3s

Kubernetes kube-apiserver mistakenly allows access to a cluster-scoped custom resource if the request is made as if the resource were namespaced

ghostscript

buffer overflow vulnerability in contrib/gdevdj9

ghostscript

buffer overflow vulnerability in jetp3852_print_page() in devices/gdev3852

ghostscript

buffer overflow vulnerability in cif_print_page() in devices/gdevcif

bind

named in ISC BIND 9

node-red

node-red

ghostscript

buffer overflow vulnerability in pj_common_print_page() in devices/gdevpjet

bind

named in ISC BIND 9

k3s

Kubernetes kube-controller-manager in versions v1

ghostscript

buffer overflow vulnerability in lprn_is_black() in contrib/lips4/gdevlprn

k3s

vulnerability was found in all versions of containernetworking/plugins before version 0

bind

named in ISC BIND 9