漏洞公告

Cross-site Scripting in Anchor CMS

Improper Input Validation and Injection in Apache Log4j2

Cross site scripting in dolibarr

golang.org/x/net/http2 allows uncontrolled memory consumption

Insecure permissions on user namespace / fakeroot temporary rootfs in Singularity

Incorrect Permission Assignment for Critical Resource in Singularity

"Verify All" Returns Success Despite Validation Failures in Singularity

Execution Control List (ECL) Is Insecure in Singularity

devices resource list treated as a blacklist by default

Information Exposure in RunC

Privilege Elevation in runc

Signature verification failure in Tendermint

Denial of Service in TenderMint

Open redirect vulnerability in Sourcegraph

Cross-site Request Forgery (CSRF)

Open Redirect in oauth2_proxy

The pattern '/\domain.com' is not disallowed when redirecting, allowing for open redirect

Open Redirect in OAuth2 Proxy

Open Redirect in OAuth2 Proxy

GitLab auth uses full name instead of username as user ID, allowing impersonation

Critical security issues in XML encoding in github.com/dexidp/dex

Authentication Bypass in dex

Remote Code Execution in npm-groovy-lint