Open Source Vulnerabilities

chromium, chromium, chromium

Insufficient policy enforcement in navigations in Google Chrome prior to 89

chromium, chromium, chromium

Side-channel information leakage in autofill in Google Chrome prior to 89

chromium, chromium, chromium

flaw was found in openjpeg's src/lib/openjp2/t2

chromium, chromium, chromium

Use after free in tab search in Google Chrome prior to 89

chromium, chromium, chromium

Use after free in Network Internals in Google Chrome on Linux prior to 89

chromium, chromium, chromium

Inappropriate implementation in Compositing in Google Chrome on Linux and Windows prior to 89

chromium, chromium, chromium

Insufficient policy enforcement in Autofill in Google Chrome prior to 89

chromium, chromium, chromium

Inappropriate implementation in full screen mode in Google Chrome prior to 89

chromium, chromium, chromium

Use after free in Blink in Google Chrome prior to 89

firefox, firefox, firefox, firefox, firefox, firefox-esr, firefox-esr, firefox-esr, firefox-esr, firefox-esr

Out of bounds write in ANGLE in Google Chrome prior to 91

Daptin: ParseAcceptLanguage `_` separator bypass enables >250x CPU amplification via Accept-Language header in LanguageMiddleware

chromium, chromium, chromium

Use after free in Cast UI and Toolbar in Google Chrome prior to 103

firefox-esr, firefox-esr, firefox-esr, firefox-esr, firefox-esr

Heap buffer overflow in libwebp in Google Chrome prior to 116

knative-operator-fips-1.24-webhook

knative-operator-fips-1.24-webhook

VoiceSentinel: Race condition in report buffer cleanup can corrupt transcript data and cause unbounded disk growth

go

Go before 1

go

Go before 1

go

net/url in Go before 1

go

Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service

go

Some HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service

go

Go before 1

go

Go before 1

go

Go before 1

go

Go before 1

go

Go before 1

go

Go before 1

go

Code injection in the go command with cgo before Go 1

go

Code injection in the go command with cgo before Go 1

go

Go before 1

go

Go before 1

go

In Go before 1

go

archive/zip in Go 1

go

encoding/xml in Go before 1

go

net/http in Go before 1

go

In Go before 1

go

In Go before 1

go

In archive/zip in Go before 1

go

Go before 1

go

crypto/tls package of Go through 1

go

Go before 1

go

Go before 1

go

encoding/xml package in Go (all versions) does not correctly preserve the semantics of element namespace prefixes during tokenization round-trips, which allows an attacker to craft inputs that beha...

go

encoding/xml package in Go (all versions) does not correctly preserve the semantics of attribute namespace prefixes during tokenization round-trips, which allows an attacker to craft inputs that be...

go

In archive/zip in Go before 1

go

Go before 1

go

ImportedSymbols in debug/macho (for Open or OpenFat) in Go before 1

go

Go before 1

go

Go before 1

go

net/http in Go before 1