漏洞公告

Heap buffer overflow in `UnsortedSegmentSum` in TensorFlow

In RubyGem excon, interrupted Persistent Connections May Leak Response Data

lodahs is malware

npm Vulnerable to Global node_modules Binary Overwrite

npm symlink reference outside of node_modules

Arbitrary File Write in npm

Object injection in cookie driver in phpfastcache

Sandbox Breakout / Arbitrary Code Execution in safer-eval

Cross-Site Scripting in serialize-to-js

Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') in Armeria

Internal exception message exposure for login action in Sylius

A poorly-behaved client could use keepalive requests to monopolize Puma's reactor and create a denial of service attack

Cross-Site Scripting in serialize-javascript

Low severity vulnerability that affects com.linecorp.armeria:armeria

Django allows unintended model editing

Validation bypass is possible in Json Pattern Validator

Strapi allows unauthenticated attacker to reset admin password without valid reset token

Apache NiFi user log out issue

Apache NiFi process group information disclosure

Apache NiFi information disclosure by XXE

Pomelo allows external control of critical state data

Duplicate Advisory: possible DoS caused by malformed signature decoding in Pure-Python ECDSA

Cross-Site Scripting in iobroker.web