漏洞公告

Directory traversal in Django

feedparser Cross-site Scripting vulnerability

Plone and Zope2 vulnerable to unauthorized access to restricted attributes

High severity vulnerability that affects Plone and Zope2

Improper date handling in Django

HTTP header injection in Plone and Zope2

feedparser Cross-site Scripting vulnerability

Improper query string handling in Django

Denial of service in django

Moderate severity vulnerability that affects Zope2

Django Cross-Site Request Forgery vulnerability

Plone and Zope2 do not reseed pseudo-random number generator

Cross-site request forgery in Django

Plone and Zope2 affected by Race Condition

Cross-site scripting in Products.CMFPlone and Products.PasswordResetTool

Plone Denial of Service vulnerability

Django-piston and Django-tastypie do not properly deserialize YAML data

feedparser denial of service vulnerability

Moderate severity vulnerability that affects Products.PlonePAS

Low severity vulnerability that affects sensu

Ciborg gem for Ruby allows local users to write files and gain privileges via Symlink

Kcapifony gem for Ruby places database user passwords on the command line

Invalid Curve Attack in node-jose