漏洞公告

Possible route enumeration in production mode via RouteNotFoundError view in Vaadin 10, 11-14, and 15-19

Reflected cross-site scripting in development mode handler in Vaadin

Reflected XSS from the callback handler's error query parameter

XXE vulnerability in Launch import

XXE vulnerability on Launch import with externally-defined DTD file

Improper Privilege Management in HashiCorp Nomad

Improper network isolation in Hashicorp Nomad

Incorrect Authorization in ORY Oathkeeper

Potential Denial-of-Service in bindata

SessionListener can prevent a session from being invalidated breaking logout

Improper Neutralization of Special Elements in Output in helm.sh/helm/v3

Plugin archive directory traversal in Helm

Duplicate Advisory: Helm passes repository credentials to alternate domain

Helm passes repository credentials to alternate domain

Unchecked hostname resolution could allow access to local network resources by users outside the local network

Asymmetric Resource Consumption (Amplification) in Docker containers created by Wings

Helm uses crypto package vulnerable to panic from malformed X.509 certificate

Possible bypass of token claim validation when OAuth2 Introspection caching is enabled

Access Control Bypass

Inconsistent Interpretation of HTTP Requests in github.com/gin-gonic/gin

Denial of service in GJSON

Incorrect Permission Assignment for Critical Resource in Hashicorp Consul

XML Processing error in github.com/crewjam/saml