Advisory Catalog

snapcraft Access Restriction Bypass

lxml vulnerable to Cross-site Scripting

Cross-site scripting in papermerge

Open redirect in Jupyter Server

Open redirect in Jupyter Notebook

Open Redirect in werkzeug

malicious SVG attachment causing stored XSS vulnerability

Locust Stored Cross-site Scripting Vulnerability

SaltStack Salt Allows creating certificates with weak file permissions

aptdaemon Information Disclosure via Improper Input Validation in Transaction class

A mis-handling of invalid unicode characters in the Java implementation of Tink versions prior to 1.5 allows an attacker to change the ID part of a ciphertext, which result in the creation of a second ciphertext that can decrypt to the same plaintext. This can be a problem with encrypting determinis

Cross-site scripting (XSS) vulnerability in the fallback authentication endpoint

Privilege Escalation in Channelmgnt plug-in for Sopel

Ansible does not collect garbage after playbook run

Cross-site Scripting (XSS) in Django REST Framework

CRLF injection in urllib3

Denial of service in tensorflow-lite

Out of bounds access in tensorflow-lite

Segfault in Tensorflow

Heap buffer overflow in Tensorflow

Denial of Service in Tensorflow

Undefined behavior in Tensorflow

Heap buffer overflow in Tensorflow

Denial of Service in Tensorflow

Memory leak in Tensorflow

Segfault in Tensorflow

Apache Airflow Cross-site Scripting

Improper Output Neutralization and Improper Encoding or Escaping of Output for Logs in ansible

Insertion of Sensitive Information into Log File and Improper Output Neutralization for Logs in ansible

Path Traversal in openapi-python-client

CSRF tokens leaked in URL by canned query form

Authorization Bypass in I hate money

Multiple stored XSS in RBAC Admin screens in Apache Airflow

Stored XSS in Apache Airflow

User passwords are stored in clear text in the Django session

Deserialization of Untrusted Data in Beaker

Directory traversal outside of SENDFILE_ROOT in django-sendfile2

Timing attack on django-basic-auth-ip-whitelist

OMERO-web Sensitive Data Exposure

XSS in Django

meinheld vulnerable to HTTP Request Smuggling

Cross-site scripting in Contentful

HTTP Request Smuggling in netius

CRLF injection in httplib2

Exposure of Resource to Wrong Sphere and Insecure Temporary File in Ansible

Exposure of Sensitive Information to an Unauthorized Actor in ansible

Exposure of Resource to Wrong Sphere and Insecure Temporary File in Ansible

OpenStack Keystone does not check signature TTL of the EC2 credential auth method

Potential Observable Timing Discrepancy in Wagtail

Path Traversal in Ansible