Open Source Vulnerabilities

rclone

Rclone 1.64.0 before 1.75.2 serve webdav Authentication Bypass via OPTIONS Requests

rclone

rclone from 1.37 before 1.74.2 SSRF via --rc-serve scheme-relative remote roots

rclone

Rclone before 1.75.2 Path Traversal via serve webdav MKCOL

rclone

rclone v1.56.0 before v1.75.2 WebDAV Credential Header Leak on Redirect

rclone

rclone 1.55.0 before 1.75.2 selfupdate Signature Verification Bypass via SHA256SUMS

rclone

rclone serve s3 1.75.0 before 1.75.2 Memory Limit Bypass via Multipart Overflow

rclone

Rclone v1.68.0 before v1.75.2 Authorization Bypass in serve s3 Multipart Uploads

pillow

Pillow: Heap buffer overflow writing JPEG comment after ICC profile fills buffer

pillow

Pillow: Heap over-read in WMF/EMF rendering via 16-bit dimension truncation (Windows builds)

pillow

Pillow: PNG eXIf chunk makes EXIF parsing run in quadratic time

pillow

Pillow: TarIO negative size field causes infinite CPU-spin loop

pillow

Pillow: Reachable undefined behavior in native integer operations, potentially leading to denial of service or logic integrity compromise

pillow

Pillow PDF append accepts malformed shared page-tree DAG causing resource exhaustion

pillow

Pillow multi-frame loaders can reuse stale native image storage after mode transitions

pillow

Pillow: BMP RLE decoder memory-amplification DoS via unbounded delta escape / absolute mode

pillow

Pillow: Decompression bomb check bypass in SpiderImagePlugin.seek() leads to unbounded allocation DoS

pillow

Pillow: Decompression-bomb protection bypass via multi-frame seek() in MPO and DCX (MpoImageFile.seek / DcxImageFile.seek)

pillow

Pillow: Arrow export leaks stale heap memory when PILLOW_ALIGNMENT > 1

powershell

Out-of-Bounds Write in Google Brotli Decoder

node-min

node-min

node-min

node-min

node-min

node-min

node-min

node-min

node-min

node

node

node

node

node

node

node

node

node

openbao

OpenBao 2.5.0 before 2.6.2 PKI allowed_ip_sans_cidr Bypass via CSR IP SANs

openbao

OpenBao 2.3.0 before 2.6.3 Missing Root Namespace Enforcement in Plugin Catalog APIs

openbao

OpenBao 2.3.0 before 2.6.3 Incorrect Authorization via Policy Cache Namespace Traversal

openbao

OpenBao before 2.6.3 Missing Header Check on Agent/Proxy Quit Endpoints

openbao

OpenBao 2.2.0 before 2.6.4 and 2.7.0 before 2.7.1 ACME EAB MAC Key Disclosure via Sanitized Configuration

openbao

OpenBao before 2.6.4 and 2.7.0 before 2.7.1 Expired AppRole SecretID Authentication Bypass

openbao

OpenBao before 2.6.3 ACL Bypass via Dropped Templated Policy Denial

openbao

OpenBao before 2.6.3 Open Redirect via OIDC Identity Provider UI

openbao

OpenBao before 2.6.4 and 2.7.0 before 2.7.1 Role-Based Rate Limit Quota Bypass via Request Parsing

openbao

OpenBao before 2.6.3 Sensitive Data Leak in Audit Log via Malformed Parameters

openbao

OpenBao before 2.6.4 and 2.7.0 before 2.7.1 Improper Audit Logging of Root Generation and Rekey Responses

openbao

OpenBao before 2.6.4 and 2.7.0 before 2.7.1 Kubernetes Auth Method Token Renewal After Revocation

389-ds, 389-ds, 389-ds, 389-ds

Security update for 389-ds