漏洞公告

Read permissions not enforced for client provided filter expressions in Elide.

Firewall configured with unanimous strategy was not actually unanimous in Symfony

Exceptions displayed in non-debug configurations in Symfony

Prevent cache poisoning via a Response Content-Type header in Symfony

regular expression denial-of-service (ReDoS) in Bleach

Vyper interfaces returning integer types less than 256 bits can be manipulated if uint256 is used

Local file inclusion vulnerability in http4s

Missing Token Replay Detection in Saml2 Authentication services for ASP.NET

Incorrect Account Used for Signing

Malicious package may avoid detection in python auditing

Bleach vulnerable to mutation XSS via whitelisted math or svg and raw tag

Cross site scripting vulnerability in ActionView

GitHub personal access token leaking into temporary EasyBuild (debug) logs

Insufficient Nonce Validation in Eclipse Milo Client

Potential buffer overflow in psd-tools

2FA bypass through deleting devices in wagtail-2fa

Sort order SQL injection in Administrate

Withdrawn: ESLint dependencies are vulnerable (ReDoS and Prototype Pollution)

Remote Code Execution Through Image Uploads in BookStack

Duplicate Advisory: python-gnupg allows context-dependent attackers to trick gnupg to decrypt other ciphertext than intended

python-docutils allows insecure usage of temporary files

Double Free in psutil

Improper Access Control in novajoin