漏洞公告

Paramiko Authentication Bypass vulnerability

Qutebrowser CSRF Vulnerability

Denial of Service via malformed accept-encoding header in hapi

Cryptographically Weak PRNG in randomatic

Out-of-bounds Read in atob

Prototype Pollution in deep-extend

High severity vulnerability that affects qs

Regular Expression Denial of Service in minimatch

High severity vulnerability that affects uglify-js

Denial-of-Service Extended Event Loop Blocking in qs

Verification Bypass in jsonwebtoken

Moderate severity vulnerability that affects mustache

Moderate severity vulnerability that affects send

Regular Expression Denial of Service in negotiator

Denial of Service in protobufjs

Prototype Pollution in merge-options

smart_proxy_dynflow gem authentication bypass in Foreman remote execution feature

Django open redirect

Pivotal Spring Framework Paths provided to the ResourceServlet were not properly sanitized

Spark allows remote attackers to read arbitrary files via a .. (dot dot) in the URI

Django vulnerable to information leakage in AuthenticationForm

node-opensl is malware

Django allows unprivileged users to read the password hashes of arbitrary accounts