漏洞公告

Forced Browsing in Twisted

Uncontrolled Resource Consumption in urllib3

REXML round-trip instability

Cross-site scripting (XSS) from unsanitized uploaded SVG files in Kirby

Improper Input Validation in Spring Framework

Externally Controlled Reference to a Resource in Another Sphere and Confused Deputy in Spring Cloud Netflix

Improper Authentication in Apache Hadoop

Gon gem lack of escaping certain input when outputting as JSON

HTTP Request Smuggling in Undertow

Allocation of Resources Without Limits or Throttling in Undertow

HTTP Request Smuggling in Undertow

LinkedIn Oncall vulnerable to Cross-Site Scripting

Logic error in Legion of the Bouncy Castle BC Java

DOM XSS in Theme Preview

Lack of Input Validation in zendesk_api_client_php for Zendesk Subdomain

SQL Server LIMIT / OFFSET SQL Injection in laravel/framework and illuminate/database

Insecure Deserialization of untrusted data in rmccue/requests

Composer's missing argument delimiter can lead to code execution via VCS repository URLs or source download URLs on systems with Mercurial

Creation of Temporary File in Directory with Insecure Permissions in the OpenAPI Generator Maven plugin

Cross-Site Scripting in Bootstrap Package

Authentication bypass for specific endpoint

Authentication Bypass

Node-Redis potential exponential regex in monitor mode