Open Source Vulnerabilities

grafana-fips-13.2

grafana-fips-12.4

grafana-fips-12.1

grafana-13.2, grafana-13.2-oci-compat

grafana-12.4, grafana-12.4-oci-compat

grafana-12.1, grafana-12.1-oci-compat

grafana-13.0, grafana-13.0-oci-compat

grafana-13.1, grafana-13.1-oci-compat

grafana-13.2, grafana-13.2-oci-compat

flyway-fips

flyway-fips

flyway-fips

filebeat-9.5-fips

flyway-fips

flyway-fips

flyway-fips

elastic-otel-collector-9.5

cluster-api-azure-controller-fips-1.27

cluster-api-azure-controller-fips-1.27

cluster-api-azure-controller-1.27

cluster-api-azure-controller-1.27

grafana-13.1

grafana-13.1

org.thymeleaf:thymeleaf

TuxCare security update for org.thymeleaf:thymeleaf (1 CVE)

nltk

NLTK: Missing Post-Download Integrity Verification Allows Malicious Package Injection

nltk

NLTK: StreamBackedCorpusView Bypasses pathsec.ENFORCE - Arbitrary Local File Read

nltk

NLTK: FileSystemPathPointer.open() sandbox check is dead code — arbitrary file read via file:// protocol

nltk

NLTK: Symlink escape in CorpusReader allows arbitrary local file read outside the corpus root

grafana-tempo-datasource

grafana-tempo-datasource

glibc, glibc

glibc vulnerabilities

percona-toolkit-mongodb-index-check

Snipe-IT before 8.7.0 CSS Injection via Custom CSS

snipe-it before 8.7.0 Missing Authorization via barcode endpoint

snipe-it before 8.7.0 Checkout Request Counter Integrity Failure

snipe-it before 8.7.0 SSRF via IPv6 transition address bypass

Snipe-IT before 8.7.1 Denial of Service via Unbounded Note Field

Snipe-IT before 8.7.0 Remote Code Execution via Backup Restore

Craft CMS before 5.10.12 Remote Code Execution via element-index

Craft CMS 5.0.0-RC1 before 5.10.12 Permission Escalation via UsersController

Craft CMS 5.0.0-RC1 before 5.10.12 Behavior Injection RCE

WWBN AVideo Unrestricted Authentication Attempts via get_api_preauthorize

AVideo through 29.0 Unauthenticated Disclosure via epg.json.php

AVideo through 29.0 Information Disclosure via stats.json.php

AVideo through 29.0 Information Disclosure via restreamsActive.json.php

grafana-tempo-datasource

grafana-tempo-datasource

grafana-mssql-datasource

grafana-loki-datasource

org.eclipse.jetty.aggregate:jetty-all, org.eclipse.jetty.fcgi:fcgi-client, org.eclipse.jetty.fcgi:fcgi-parent, org.eclipse.jetty.fcgi:fcgi-server, org.eclipse.jetty.gcloud:gcloud-parent, org.eclipse.jetty.gcloud:jetty-gcloud-session-manager, org.eclipse.jetty.http2:http2-client, org.eclipse.jetty.http2:http2-common, org.eclipse.jetty.http2:http2-hpack, org.eclipse.jetty.http2:http2-http-client-transport, org.eclipse.jetty.http2:http2-parent, org.eclipse.jetty.http2:http2-server, org.eclipse.jetty.memcached:jetty-memcached-sessions, org.eclipse.jetty.memcached:memcached-parent, org.eclipse.jetty.osgi:jetty-httpservice, org.eclipse.jetty.osgi:jetty-osgi-alpn, org.eclipse.jetty.osgi:jetty-osgi-boot, org.eclipse.jetty.osgi:jetty-osgi-boot-jsp, org.eclipse.jetty.osgi:jetty-osgi-boot-warurl, org.eclipse.jetty.osgi:jetty-osgi-project, org.eclipse.jetty.osgi:test-jetty-osgi, org.eclipse.jetty.osgi:test-jetty-osgi-webapp-resources, org.eclipse.jetty.tests:test-mock-resources, org.eclipse.jetty.websocket:javax-websocket-client-impl, org.eclipse.jetty.websocket:javax-websocket-server-impl, org.eclipse.jetty.websocket:jetty-websocket-tests, org.eclipse.jetty.websocket:websocket-api, org.eclipse.jetty.websocket:websocket-client, org.eclipse.jetty.websocket:websocket-common, org.eclipse.jetty.websocket:websocket-parent, org.eclipse.jetty.websocket:websocket-server, org.eclipse.jetty.websocket:websocket-servlet, org.eclipse.jetty:apache-jsp, org.eclipse.jetty:apache-jstl, org.eclipse.jetty:infinispan-common, org.eclipse.jetty:infinispan-embedded, org.eclipse.jetty:infinispan-embedded-query, org.eclipse.jetty:infinispan-parent, org.eclipse.jetty:infinispan-remote, org.eclipse.jetty:infinispan-remote-query, org.eclipse.jetty:jetty-alpn-client, org.eclipse.jetty:jetty-alpn-conscrypt-client, org.eclipse.jetty:jetty-alpn-conscrypt-server, org.eclipse.jetty:jetty-alpn-java-client, org.eclipse.jetty:jetty-alpn-java-server, org.eclipse.jetty:jetty-alpn-openjdk8-client, org.eclipse.jetty:jetty-alpn-openjdk8-server, org.eclipse.jetty:jetty-alpn-parent, org.eclipse.jetty:jetty-alpn-server, org.eclipse.jetty:jetty-annotations, org.eclipse.jetty:jetty-ant, org.eclipse.jetty:jetty-bom, org.eclipse.jetty:jetty-cdi, org.eclipse.jetty:jetty-client, org.eclipse.jetty:jetty-continuation, org.eclipse.jetty:jetty-deploy, org.eclipse.jetty:jetty-distribution, org.eclipse.jetty:jetty-documentation, org.eclipse.jetty:jetty-hazelcast, org.eclipse.jetty:jetty-home, org.eclipse.jetty:jetty-http, org.eclipse.jetty:jetty-http-spi, org.eclipse.jetty:jetty-io, org.eclipse.jetty:jetty-jaas, org.eclipse.jetty:jetty-jaspi, org.eclipse.jetty:jetty-jmx, org.eclipse.jetty:jetty-jndi, org.eclipse.jetty:jetty-jspc-maven-plugin, org.eclipse.jetty:jetty-maven-plugin, org.eclipse.jetty:jetty-nosql, org.eclipse.jetty:jetty-openid, org.eclipse.jetty:jetty-plus, org.eclipse.jetty:jetty-project, org.eclipse.jetty:jetty-proxy, org.eclipse.jetty:jetty-quickstart, org.eclipse.jetty:jetty-rewrite, org.eclipse.jetty:jetty-runner, org.eclipse.jetty:jetty-security, org.eclipse.jetty:jetty-server, org.eclipse.jetty:jetty-servlet, org.eclipse.jetty:jetty-servlets, org.eclipse.jetty:jetty-spring, org.eclipse.jetty:jetty-start, org.eclipse.jetty:jetty-unixsocket, org.eclipse.jetty:jetty-util, org.eclipse.jetty:jetty-util-ajax, org.eclipse.jetty:jetty-webapp, org.eclipse.jetty:jetty-xml, org.eclipse.jetty:test-jetty-webapp, org.eclipse.jetty:test-proxy-webapp

TuxCare security update for 90 packages (2 CVEs)