Advisory Catalog

Path traversal in flaskcode

Path traversal in flaskcode

Minor fix to previous patch for CVE-2022-35918

Gentoo Portage missing PGP validation of executed code

Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter

cdo-local-uuid vulnerable to insertion of artifact derived from developer's Present Working Directory into demonstration code

Untrusted search path under some conditions on Windows allows arbitrary code execution

Hyperledger Aries Cloud Agent Python result of presentation verification not checked for LDP-VC

fonttools XML External Entity Injection (XXE) Vulnerability

Apprite CLI makes Use of Hard-coded Credentials

pyload Log Injection vulnerability

pyload Unauthenticated Flask Configuration Leakage vulnerability

D-Tale server-side request forgery through Web uploads

PyCryptodome and pycryptodomex side-channel leakage for OAEP decryption

gratient 0.5 contains credential harvesting code

PaddlePaddle floating point exception in paddle.nanmedian

PaddlePaddle floating point exception in paddle.linalg.matrix_rank

PaddlePaddle segfault in paddle.dot

PaddlePaddle floating point exception in paddle.linalg.eig

PaddlePaddle segfault in paddle.mode

PaddlePaddle null pointer dereference in paddle.nextafter

PaddlePaddle segfault in paddle.put_along_axis

PaddlePaddle stack overflow in paddle.searchsorted

PaddlePaddle floating point exception in paddle.topk

PaddlePaddle floating point exception in paddle.lerp

PaddlePaddle stack overflow in paddle.linalg.lu_unpack

PaddlePaddle floating point exception in paddle.amin

PaddlePaddle heap buffer overflow in paddle.repeat_interleave

PaddlePaddle command injection in get_online_pass_interval

PaddlePaddle command injection in _wget_download

PaddlePaddle nullptr dereference in paddle.crop

PaddlePaddle floating point exception in paddle.argmin and paddle.argmax

PaddlePaddle command injection in convert_shape_compare

Hail relies on OIDC email claims to verify the validity of a user's domain.

A vulnerability, which was classified as critical, has been found in MicroPython 1.21.0/1.22.0-preview. Affected by this issue is the function poll_set_add_fd of the file extmod/modselect.c. The manipulation leads to use after free. The exploit has been disclosed to the public and may be used. The p

DoS with algorithms that use PBKDF2 due to unbounded PBES2 Count value

Open redirect vulnerability in Flask-Security-Too

Nautobot missing object-level permissions enforcement when running Job Buttons

Gradio makes the `/file` secure against file traversal and server-side request forgery attacks

Apache Airflow has a stored cross-site scripting vulnerability

Apache Airflow vulnerable to Exposure of Resource to Wrong Sphere

Apache Airflow Cross-Site Request Forgery vulnerability