漏洞公告

Denial of Service (DoS) in restify-paginate

mongodb-client-encryption vulnerable to Improper Certificate Validation

Prototype Pollution in set-or-get

Improper Input Validation in sopel-plugins.channelmgnt

Directory Traversal in Django

CSRF Vuln can expose user's QRcode

Indico Tampering with links (e.g. password reset) in sent emails

Exposure of class information in RESTEasy

Exposure of Sensitive Information to an Unauthorized Actor and Insecure Temporary File in Ansible

Improper Restriction of XML External Entity Reference in Plone

SSRF attacks via tracebacks in Plone

Improper Restriction of XML External Entity Reference in Plone

Cross-Site Request Forgery in Webargs

Improper Access Control in Apache Airflow

bottle HTTP Request smuggling

Logic error in authentication in proxy.py

Cross-site scripting in actionpack

Improper Certificate Validation in phpseclib

Arbitrary code execution in clickhouse-driver

Code Injection, Race Condition, and Execution with Unnecessary Privileges in Ansible

Exposure of Resource to Wrong Sphere and Insecure Temporary File in Ansible

Path Traversal in Ansible

Insertion of Sensitive Information into Log File, Invocation of Process Using Visible Sensitive Information, and Exposure of Sensitive Information to an Unauthorized Actor in Ansible