漏洞公告

Code injection in kill-process-by-name

Prototype Pollution Vulnerability in object-collider

Command injection in wc-cmd

Prototype pollution in set-in

Regular Expression Denial-of-Service in npm schema-inspector

Potential remote code execution in Apache Tomcat

Cross-site scripting in eZ Platform Kernel

Using default SSLContext for HTTPS requests in an HTTPS proxy doesn't verify certificate hostname for proxy connection

Null characters not escaped

Django Incorrect Default Permissions

Django Incorrect Default Permissions

Django Directory Traversal via archive.extract

Pillow Out-of-bounds Read

Pillow Out-of-bounds Read

Pillow Out-of-bounds Write

Pillow Uncontrolled Resource Consumption

Pillow Denial of Service by Uncontrolled Resource Consumption

Pillow Denial of Service by Uncontrolled Resource Consumption

html-parse-stringify and html-parse-stringify2 vulnerable to Regular expression denial of service (ReDoS)

Improper Input Validation (RCE)

Insufficiently Protected Credentials in Elasticsearch

Privilege Escalation Flaw in Elasticsearch

Privilege Context Switching Error in Elasticsearch