Advisory Catalog

TorBot vulnerable to Inefficient Regular Expression Complexity in validate_link

urllib3's request body not stripped after redirect from 303 status changes request method to GET

NULL Pointer Dereference in GitHub repository seleniumhq/selenium prior to 4.14.0.

Authorization Header forwarded on redirect

Apache Airflow vulnerable to sensitive information exposure

Apache Airflow vulnerable to sensitive information exposure when users list warnings for all DAGs

Apache Airflow vulnerable to privilege escalation

Apache Airflow vulnerable to sensitive information exposure when expose-config is set to non-sensitive-only

pyminizip affected by zlib's integer overflow/heap based buffer overflow vulnerability due to vulnerable dependency

Defining resource name as integer may give unintended access in vantage6

vantage6 does not properly delete linked resources when deleting a collaboration

Improper Access Control in vantage6

Pickle serialization vulnerable to Deserialization of Untrusted Data

Microsoft Common Data Model SDK Denial of Service Vulnerability

matrix-synapse vulnerable to denial of service due to malicious server ACL events

langchain_experimental vulnerable to arbitrary code execution via PALChain in the python exec method

OctoPrint vulnerable to Improper Neutralization of Special Elements Used in a Template Engine

Bundled libwebp in pywebp vulnerable

NI MeasurementLink Python Services Improper Access Restriction vulnerability

Bundled libwebp in imagecodecs vulnerable

Zope management interface vulnerable to stored cross site scripting via the title property

Ansible may expose private key

asyncua Improper Authentication vulnerability

asyncua vulnerable to denial of service via infinite loop

opentelemetry-instrumentation Denial of Service vulnerability due to unbound cardinality metrics

`Cookie` HTTP header isn't stripped on cross-origin redirects

TorchServe Pre-Auth Remote Code Execution

pretix potential IP address spoofing vulnerability

opencv-contrib-python versions before v4.8.1.78 bundled libwebp binaries in wheels that are vulnerable to CVE-2023-4863. opencv-contrib-python v4.8.1.78 upgrades the bundled libwebp binary to v1.3.2.

opencv-contrib-python-headless versions before v4.8.1.78 bundled libwebp binaries in wheels that are vulnerable to CVE-2023-4863. opencv-contrib-python-headless v4.8.1.78 upgrades the bundled libwebp binary to v1.3.2.