漏洞公告

Duplicate Advisory: Keycloak vulnerable to Cross-Site Scripting (XSS)

Duplicate Advisory: Keycloak user may register themselves with same email ID of any existing user

Duplicate Advisory: KubeVirt arbitrary host file read from the VM

Duplicate Advisory: .NET Information Disclosure Vulnerability

Keycloak allows arbitrary Javascript to be uploaded for SAML protocol mapper even if UPLOAD_SCRIPTS feature disabled

Withdrawn Advisory: Out-of-bounds Read can lead to client side denial of service

Duplicate Advisory GHSA-hrgx-p36p-89q4

Withdrawn: Denial of Service in aiohttp

Duplicate Advisory: `#[zeroize(drop)]` doesn't implement `Drop` for `enum`s

Duplicate Advisory: `Read` on uninitialized buffer may cause UB ('tectonic_xdv' crate)

Potential segfault in `localtime_r` invocations

Duplicate Advisory: Integer Overflow in HeaderMap::reserve() can cause Denial of Service

Unserialized Pop Chain in Laravel

Duplicate Advisory: ReDoS via crafted JSON input in GJSON

Duplicate Advisory: Embedded malware in ua-parser-js

Withdrawn Advisory: kubernetes-nmstate Insecure Privilege Management

Istio Authorization Bypass Vulnerability

Duplicate Advisory: Improper Neutralization of CRLF Sequences in dio

StackStorm st2 Infinite Loop Condition

Withdrawn Advisory: Insufficient Granularity of Access Control in JSDom

Duplicate Advisory: Unauthorized privilege escalation in Mod module

Duplicate Advisory: Kerberos for NodeJS allows DLL Injection

Withdrawn Advisory: Improper Restriction of XML External Entity Reference in Mulesoft APIkit