Open Source Vulnerabilities
sqlpad
xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) `DOMParser` and `XMLSerializer` module
sqlpad
xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) `DOMParser` and `XMLSerializer` module
sqlpad
Security fix for GHSA-j759-j44w-7fr8 applied in: sqlpad 7.5.7-r2
sqlpad
Security fix for GHSA-j759-j44w-7fr8 applied in: sqlpad 7.5.7-r2
sqlpad
Security fix for GHSA-x6wf-f3px-wcqx applied in: sqlpad 7.5.7-r2
sqlpad
Security fix for GHSA-x6wf-f3px-wcqx applied in: sqlpad 7.5.7-r2
sqlpad
Security fix for GHSA-wh4c-j3r5-mjhp applied in: sqlpad 7.5.7-r2
sqlpad
Security fix for GHSA-wh4c-j3r5-mjhp applied in: sqlpad 7.5.7-r2
sqlpad
Security fix for GHSA-f6ww-3ggp-fr8h applied in: sqlpad 7.5.7-r2
sqlpad
Security fix for GHSA-f6ww-3ggp-fr8h applied in: sqlpad 7.5.7-r2
sqlpad
Security fix for GHSA-2v35-w6hq-6mfw applied in: sqlpad 7.5.7-r2
sqlpad
Security fix for GHSA-2v35-w6hq-6mfw applied in: sqlpad 7.5.7-r2
argo-workflows, sqlpad, sqlpad
Impact: In body-parser versions prior to 1
argo-workflows/ sqlpad/ sqlpad
Impact: In body-parser versions prior to 1
sqlpad, sqlpad
Security fix for GHSA-v422-hmwv-36x6 applied in: sqlpad 7.5.7-r2, sqlpad 7.5.7-r3
sqlpad/ sqlpad
Security fix for GHSA-v422-hmwv-36x6 applied in: sqlpad 7.5.7-r2, sqlpad 7.5.7-r3
Stored XSS via HTML scrubber rule in RTIR
argo-workflows
Security fix for GHSA-73rr-hh4g-fpgx applied in: argo-workflows 3.6.19-r5
argo-workflows
Security fix for GHSA-73rr-hh4g-fpgx applied in: argo-workflows 3.6.19-r5
renovate, renovate, renovate
node-tar is a tar archive manipulation library for Node
renovate/ renovate/ renovate
node-tar is a tar archive manipulation library for Node
qt3d-opensource-src, qt3d-opensource-src, qt3d-opensource-src, qt6-3d, qt6-3d, qt6-3d
qt3d-opensource-src/ qt3d-opensource-src/ qt3d-opensource-src/ qt6-3d/ qt6-3d/ qt6-3d
Blender before 4.5.15 and 5.x before 5.2.3 Heap Out-of-Bounds Access via read_struct()
Blender before 4.5.15 and 5.x before 5.2.3 Heap Out-of-Bounds Access via read_struct()
Blender before 4.5.15 and 5.x before 5.2.3 Out-of-Bounds Read via blo_bhead_id Accessors
Blender before 4.5.15 and 5.x before 5.2.3 Out-of-Bounds Read via blo_bhead_id Accessors
Blender before 4.5.15 and 5.x before 5.2.3 Out-of-Bounds Read via GLOB Block
Blender before 4.5.15 and 5.x before 5.2.3 Out-of-Bounds Read via GLOB Block
Blender before 4.5.15 and 5.x before 5.2.3 Heap Buffer Overflow via Thumbnail Extraction
Blender before 4.5.15 and 5.x before 5.2.3 Heap Buffer Overflow via Thumbnail Extraction
Blender before 4.5.15 and 5.x before 5.2.3 Heap Buffer Overflow via Point Cache
Blender before 4.5.15 and 5.x before 5.2.3 Heap Buffer Overflow via Point Cache
pybars4 through 0.9.13 Code Injection via Bracketed Path Segments
pybars4 through 0.9.13 Code Injection via Bracketed Path Segments
pybars3 through 0.9.7 and pybars4 through 0.9.13 Code Injection via Bracketed Path Segments
pybars3 through 0.9.7 and pybars4 through 0.9.13 Code Injection via Bracketed Path Segments
NocoDB before 2026.08.0 Clickjacking via Missing Frame-Control Headers
NocoDB before 2026.08.0 Clickjacking via Missing Frame-Control Headers
My Calendar 3.8.8 before 3.8.11 Unauthenticated Shortcode Injection via mcs Parameter
My Calendar 3.8.8 before 3.8.11 Unauthenticated Shortcode Injection via mcs Parameter
Paperclip 2026.403.0 before 2026.416.0 RCE via Execution Workspace Cleanup Commands
Paperclip 2026.403.0 before 2026.416.0 RCE via Execution Workspace Cleanup Commands
PipesHub before 0.10.0 SSRF via Image URLs in Indexed Documents
PipesHub before 0.10.0 SSRF via Image URLs in Indexed Documents
PipesHub before 0.10.0 Rate Limit Bypass via Spoofed X-Forwarded-For Header
PipesHub before 0.10.0 Rate Limit Bypass via Spoofed X-Forwarded-For Header
PipesHub 0.3.0 before 0.10.0 Connector Deletion via Crawling-Manager Schedule Route
PipesHub 0.3.0 before 0.10.0 Connector Deletion via Crawling-Manager Schedule Route
