漏洞公告

Duplicate Advisory: Flowise vulnerable to RCE via Dynamic function constructor injection

Duplicate Advisory: Keras safe mode bypass vulnerability

Duplicate Advisory: Denial of service via malicious preflight requests in github.com/rs/cors

Duplicate Advisory: Keycloak-services SMTP Inject Vulnerability

Duplicate Advisory: CIRCL-Fourq: Missing and wrong validation can lead to incorrect results

Duplicate Advisory: ssrfcheck has Incomplete IP Address Deny List that leads to Server-Side Request Forgery Vulnerability

Duplicate Advisory: sequoia-openpgp vulnerable to out-of-bounds array access leading to panic

Duplicate Advisory: buffered-reader vulnerable to out-of-bounds array access leading to panic

Duplicate Advisory: `openssl` `X509VerifyParamRef::set_host` buffer over-read

Duplicate Advisory: `ed25519-dalek` Double Public Key Signing Function Oracle Attack

Duplicate Advisory: gix-transport code execution vulnerability

Duplicate Advisory: Remotely exploitable denial of service in Rosenpass

Duplicate Advisory: Unauthenticated Nonce Increment in snow

Duplicate Advisory: Multiple issues involving quote API in shlex

Duplicate Advisory: transpose: Buffer overflow due to integer overflow

Duplicate Advisory: serde-json-wasm stack overflow during recursive JSON parsing

Duplicate Advisory: CosmWasm affected by arithmetic overflows

Duplicate Advisory: Low severity (DoS) vulnerability in sequoia-openpgp

Duplicate Advisory: curve25519-dalek has timing variability in `curve25519-dalek`'s `Scalar29::sub`/`Scalar52::sub`

Withdrawn Advisory: CodeIgniter4 Cross-Site Scripting Vulnerability in debugbar_time Parameter

Withdrawn Advisory: JHipster allows privilege escalation via a modified authorities parameter

Duplicate Advisory: Koa Open Redirect via Referrer Header (User-Controlled)

Withdrawn Advisory: Axios has Transitive Critical Vulnerability via form-data